Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSpectrum Virtualize (b93e4dba-6153-53e4-8888-0853508a77bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-27870 vulnerable 2026-06-08 05:57:42.356740 IBM Spectrum Virtualize information disclosure
MEDIUM (5.9)
IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IBM X-Force ID: 249518.
Published: 2023-05-11T19:36:23.223Z
Updated: 2025-01-24T16:11:20.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25681 vulnerable 2026-06-08 05:56:09.630820 IBM Spectrum Virtualize security bypass
MEDIUM (5.3)
LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID: 247033.
Published: 2024-03-05T19:42:01.977Z
Updated: 2024-08-02T11:25:19.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43873 vulnerable 2026-06-08 05:49:34.921433 IBM Spectrum Virtualize privilege escalation
MEDIUM (6.3)
An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system. IBM X-Force ID: 239847.
Published: 2023-02-22T17:32:31.652Z
Updated: 2024-08-03T13:40:06.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43870 vulnerable 2026-06-08 05:49:34.913364 IBM Spectrum Virtualize information disclosure
MEDIUM (6.5)
IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files. IBM X-Force ID: 239540.
Published: 2023-02-22T17:26:20.175Z
Updated: 2025-03-11T18:29:26.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39167 vulnerable 2026-06-08 05:47:18.268744 IBM Spectrum Virtualize information disclosure
MEDIUM (5.9)
IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive information to an attacker using man-in-the-middle techniques. IBM X-Force ID: 235408.
Published: 2023-01-19T16:44:30.107Z
Updated: 2025-04-02T14:54:00.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38969 vulnerable 2026-06-08 05:33:48.683149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29873 vulnerable 2026-06-08 05:31:27.173571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1466 vulnerable 2026-06-08 05:11:18.270150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1465 vulnerable 2026-06-08 05:11:18.268598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1464 vulnerable 2026-06-08 05:11:18.266985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1463 vulnerable 2026-06-08 05:11:18.264816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1462 vulnerable 2026-06-08 05:11:18.263354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1461 vulnerable 2026-06-08 05:11:18.257183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1438 vulnerable 2026-06-08 05:11:18.199398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1434 vulnerable 2026-06-08 05:11:18.183107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1433 vulnerable 2026-06-08 05:11:18.174993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.