CVE-2020-4222: IBM Spectrum Protect

Critical severity, CVSS 9.8. EPSS: 15.5% chance of exploitation in the next 30 days.

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175091.

Affected products

• IBM Spectrum Protect: from 10.1.0, before 10.1.5 (fixed in 10.1.5); version 10.1.5 only

Published 2020-02-24. Last modified 2026-06-17.