Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSpectrum Protect Plus (6b20afef-dd18-56be-9947-2d3aa776d968)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47148 vulnerable 2026-06-08 06:14:24.086270 IBM Storage Protect Plus Server information disclosure
MEDIUM (5.3)
IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the system. IBM X-Force ID: 270599.
Published: 2024-02-02T12:51:55.566Z
Updated: 2024-08-02T21:01:22.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40608 vulnerable 2026-06-08 05:48:27.706336 Details available
MEDIUM (5.9)
IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873.
Published: 2022-09-19T17:25:13.593Z
Updated: 2024-09-17T01:06:47.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40234 vulnerable 2026-06-08 05:48:24.366118 Details available
MEDIUM (5.9)
Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM Spectrum Protect Plus. If this generated .crt file is shared, an attacker can obtain the private key information for the uploaded certificate. IBM X-Force ID: 235718.
Published: 2022-09-19T17:25:12.750Z
Updated: 2024-09-16T23:45:52.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22472 vulnerable 2026-06-08 05:40:53.774085 Details available
MEDIUM (6)
IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through 10.1.10.2 for Red Hat OpenShift) could allow a remote attacker to bypass IBM Spectrum Protect Plus role based access control restrictions, caused by improper disclosure of session information. By retrieving the logs of a container an attacker could exploit this vulnerability to bypass login security of the IBM Spectrum Protect Plus server and gain unauthorized access based on the permissions of the IBM Spectrum Protect Plus user to the vulnerable Spectrum Protect Plus server software. IBM X-Force ID: 225340.
Published: 2022-06-30T16:50:27.426Z
Updated: 2024-09-17T00:00:55.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22396 vulnerable 2026-06-08 05:40:53.710938 Details available
MEDIUM (6.8)
Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the remote vSnap, offload targets, or VADP credentials depending on the operation performed. Credentials that are using API key or certificate are not printed. IBM X-Force ID: 222231.
Published: 2022-06-06T16:30:14.969Z
Updated: 2024-09-16T16:18:18.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22354 vulnerable 2026-06-08 05:40:53.626823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3669 vulnerable 2026-06-08 05:33:53.366338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39063 vulnerable 2026-06-08 05:33:48.841382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39057 vulnerable 2026-06-08 05:33:48.835902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29694 vulnerable 2026-06-08 05:31:26.805170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20536 vulnerable 2026-06-08 05:29:09.430622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20490 vulnerable 2026-06-08 05:29:09.324512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20432 vulnerable 2026-06-08 05:29:09.249074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5023 vulnerable 2026-06-08 05:26:41.382738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5022 vulnerable 2026-06-08 05:26:41.382313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5021 vulnerable 2026-06-08 05:26:41.381617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5020 vulnerable 2026-06-08 05:26:41.381258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5019 vulnerable 2026-06-08 05:26:41.380711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5018 vulnerable 2026-06-08 05:26:41.380047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5017 vulnerable 2026-06-08 05:26:41.372715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4854 vulnerable 2026-06-08 05:26:41.056008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4783 vulnerable 2026-06-08 05:26:40.910910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4711 vulnerable 2026-06-08 05:26:40.811008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4703 vulnerable 2026-06-08 05:26:40.805929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4631 vulnerable 2026-06-08 05:26:40.560985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4565 vulnerable 2026-06-08 05:25:59.548583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4497 vulnerable 2026-06-08 05:25:59.427634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4496 vulnerable 2026-06-08 05:25:59.427203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4477 vulnerable 2026-06-08 05:25:59.379130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4471 vulnerable 2026-06-08 05:25:59.375541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4470 vulnerable 2026-06-08 05:25:59.375229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4469 vulnerable 2026-06-08 05:25:59.374911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4242 vulnerable 2026-06-08 05:25:59.037488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4241 vulnerable 2026-06-08 05:25:59.037149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4240 vulnerable 2026-06-08 05:25:59.036832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4222 vulnerable 2026-06-08 05:25:59.019669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4216 vulnerable 2026-06-08 05:25:59.016792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4214 vulnerable 2026-06-08 05:25:59.016466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4213 vulnerable 2026-06-08 05:25:59.016097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4212 vulnerable 2026-06-08 05:25:59.015703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4211 vulnerable 2026-06-08 05:25:59.015272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4210 vulnerable 2026-06-08 05:25:59.012590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4209 vulnerable 2026-06-08 05:25:59.012141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4208 vulnerable 2026-06-08 05:25:59.011779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4206 vulnerable 2026-06-08 05:25:59.007981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4703 vulnerable 2026-06-08 05:13:57.418214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4652 vulnerable 2026-06-08 05:13:57.380629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4385 vulnerable 2026-06-08 05:13:57.111783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4383 vulnerable 2026-06-08 05:13:57.106491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4357 vulnerable 2026-06-08 05:13:57.091078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1768 vulnerable 2026-06-08 05:11:18.708472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.