Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:spectrum_virtualize:8.5.0.0:*:*:*:*:*:*:*

part: a version: 8.5.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSpectrum Virtualize (b93e4dba-6153-53e4-8888-0853508a77bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25681 vulnerable 2026-06-08 05:56:09.631594 IBM Spectrum Virtualize security bypass
MEDIUM (5.3)
LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID: 247033.
Published: 2024-03-05T19:42:01.977Z
Updated: 2024-08-02T11:25:19.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43873 vulnerable 2026-06-08 05:49:34.923552 IBM Spectrum Virtualize privilege escalation
MEDIUM (6.3)
An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system. IBM X-Force ID: 239847.
Published: 2023-02-22T17:32:31.652Z
Updated: 2024-08-03T13:40:06.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43870 vulnerable 2026-06-08 05:49:34.916276 IBM Spectrum Virtualize information disclosure
MEDIUM (6.5)
IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files. IBM X-Force ID: 239540.
Published: 2023-02-22T17:26:20.175Z
Updated: 2025-03-11T18:29:26.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39167 vulnerable 2026-06-08 05:47:18.273110 IBM Spectrum Virtualize information disclosure
MEDIUM (5.9)
IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive information to an attacker using man-in-the-middle techniques. IBM X-Force ID: 235408.
Published: 2023-01-19T16:44:30.107Z
Updated: 2025-04-02T14:54:00.216Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.