IBM Tivoli Storage Manager For Virtual Environments vulnerabilities

4 CVEs affecting IBM Tivoli Storage Manager For Virtual Environments, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1550, published 2018-09-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-2988, published 2016-11-25. High severity, CVSS 8.5. EPSS: 1% chance of exploitation in the next 30 days. IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated…
CVE-2015-1988, published 2015-10-04. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 and Tivoli…
CVE-2018-1550, published 2018-09-26. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696.
CVE-2013-6713, published 2014-05-26. Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properly check authorization for backup and restore operations,…