IBM Spectrum Protect Operations Center vulnerabilities

13 CVEs affecting IBM Spectrum Protect Operations Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22494, published 2022-06-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-4087, published 2019-07-02. Critical severity, CVSS 9.8. EPSS: 7% chance of exploitation in the next 30 days. IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to…
CVE-2020-4693, published 2020-09-02. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior…
CVE-2019-4129, published 2019-07-02. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message containing a stack trace. By creating an error with a…
CVE-2022-22494, published 2022-06-30. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request.…
CVE-2020-4771, published 2020-11-23. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a…
CVE-2022-22485, published 2022-06-17. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on…
CVE-2020-4955, published 2021-02-15. High severity, CVSS 8.0. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet…
CVE-2020-4954, published 2021-02-15. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper session validation . By using the configuration panel to…
CVE-2019-4088, published 2019-07-02. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a specially crafted library loaded by the dsmqsan…
CVE-2020-4956, published 2021-02-15. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large…

Latest

CVE-2022-22348, published 2022-03-14. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An…
CVE-2022-22346, published 2022-03-14. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted…
CVE-2021-38901, published 2021-12-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sensitive information. IBM X-Force ID: 209610.