CVE-2020-4470: IBM Spectrum Protect Plus

High severity, CVSS 8.0. EPSS: 1.9% chance of exploitation in the next 30 days.

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. IBM X-Force ID: 181725.

Affected products

• IBM Spectrum Protect Plus: from 10.1.0, up to and including 10.1.5

Published 2020-06-15. Last modified 2026-06-17.