IBM Spectrum Protect For Space Management vulnerabilities

7 CVEs affecting IBM Spectrum Protect For Space Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-33832, published 2023-07-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4494, published 2020-06-15. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through…
CVE-2018-1447, published 2018-04-04. High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days. The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of…
CVE-2020-4406, published 2020-06-15. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through…
CVE-2021-29672, published 2021-04-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker…
CVE-2021-39048, published 2021-12-13. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could exploit this vulnerability and cause a denial of…
CVE-2021-20546, published 2021-04-26. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the…
CVE-2023-33832, published 2023-07-19. Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days. IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality. IBM X-Force ID: 256012.