Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Spectrum_virtualize
(Ibm)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 16 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2023-01-19 | CVE-2022-39167 | IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive information to an attacker using man-in-the-middle techniques. IBM X-Force ID: 235408. | Spectrum_virtualize | 5.9 | ||
2023-02-22 | CVE-2022-43870 | IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files. IBM X-Force ID: 239540. | Spectrum_virtualize | 6.5 | ||
2023-02-22 | CVE-2022-43873 | An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system. IBM X-Force ID: 239847. | Spectrum_virtualize | 8.8 | ||
2023-05-11 | CVE-2023-27870 | IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IBM X-Force ID: 249518. | Spectrum_virtualize | 7.5 | ||
2021-10-21 | CVE-2021-29873 | IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229. | Flashsystem_9000_firmware, Flashsystem_9100_firmware, San_volume_controller_firmware, Spectrum_virtualize, Spectrum_virtualize_for_public_cloud, Storwize_v3500_software, Storwize_v3700_software, Storwize_v5000_software, Storwize_v5100_software, Storwize_v7000_software | 8.1 | ||
2022-05-11 | CVE-2021-38969 | IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of support generated credentials. IBM X-Force ID: 212609. | Spectrum_virtualize | 9.8 |