IBM Spectrum Protect Client vulnerabilities

9 CVEs affecting IBM Spectrum Protect Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-33832, published 2023-07-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4494, published 2020-06-15. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through…
CVE-2018-1785, published 2018-09-26. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870.
CVE-2022-22474, published 2022-06-30. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockets. This can result in a denial of service for IBM Spectrum…
CVE-2018-1545, published 2018-09-26. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID:…
CVE-2020-4406, published 2020-06-15. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through…
CVE-2021-29672, published 2021-04-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker…
CVE-2021-20546, published 2021-04-26. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the…
CVE-2022-22478, published 2022-06-30. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886.
CVE-2023-33832, published 2023-07-19. Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days. IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality. IBM X-Force ID: 256012.