Spectrum Protect Server
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:spectrum_protect_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Spectrum Protect Server (762926c9-95d0-5b6c-abc6-67656d4fdd8d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3319 |
vulnerable | 2026-06-08 07:23:08.633204 |
IBM Spectrum Protect Server authentication bypass
HIGH (8.1)
IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access to unauthorized resources.
Published: 2025-06-20T14:50:45.991Z
Updated: 2025-08-24T11:45:17.815Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22496 |
vulnerable | 2026-06-08 05:40:53.865281 |
Details available
MEDIUM (5.3)
While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942.
Published: 2022-06-30T16:25:31.669Z
Updated: 2024-09-17T01:15:47.167Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22487 |
vulnerable | 2026-06-08 05:40:53.829626 |
Details available
MEDIUM (5.9)
An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage agent without locking the administrative ID. A remote attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to both the IBM Spectrum Protect storage agent and the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 with which it communicates. IBM X-Force ID: 226326.
Published: 2022-06-30T16:25:26.688Z
Updated: 2024-09-16T20:07:36.798Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22485 |
vulnerable | 2026-06-08 05:40:53.816311 |
Details available
MEDIUM (5.9)
In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325.
Published: 2022-06-17T15:20:14.355Z
Updated: 2024-09-17T00:10:27.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22394 |
vulnerable | 2026-06-08 05:40:53.709518 |
Details available
HIGH (7.5)
The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.
Published: 2022-03-21T16:20:14.517Z
Updated: 2024-09-16T17:24:06.828Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20491 |
vulnerable | 2026-06-08 05:29:09.326842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4591 |
vulnerable | 2026-06-08 05:26:40.502939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1788 |
vulnerable | 2026-06-08 05:11:18.751967 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.