GCVE - cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:*

part: a version: 5.2.8 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Spectrum Control (`aac5262c-7579-5ac7-b97d-af986c7f2b5f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-8943`	vulnerable	2026-06-08 05:08:22.221786	Details available IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T02:35:02.322Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94917 http://www.ibm.com/support/docview.wss?uid=swg21995128	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8942`	vulnerable	2026-06-08 05:08:22.219062	Details available IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T02:35:02.283Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21995128 http://www.securityfocus.com/bid/94916	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8941`	vulnerable	2026-06-08 05:08:22.208617	Details available IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T02:35:02.479Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94914 http://www.ibm.com/support/docview.wss?uid=swg21995128	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5947`	vulnerable	2026-06-08 05:07:58.182460	Details available IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site. Published: 2016-09-26T01:00:00.000Z Updated: 2024-08-06T01:15:10.591Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/93085 http://www-01.ibm.com/support/docview.wss?uid=swg21988625 http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5946`	vulnerable	2026-06-08 05:07:58.181620	Details available Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL. Published: 2016-09-26T01:00:00.000Z Updated: 2024-08-06T01:15:10.555Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21988625 http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944 http://www.securityfocus.com/bid/93086	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5945`	vulnerable	2026-06-08 05:07:58.180946	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5944`	vulnerable	2026-06-08 05:07:58.173184	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5943`	vulnerable	2026-06-08 05:07:58.170980	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.