Spectrum Protect Client
Vendor:
First CVE: Sep 26, 2018 · Active for 7 years
9
Total CVEs
More Total CVEs than 88% of tracked products
1.8
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Spectrum Protect Client over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 26, 2018
7 years ago
Most Recent CVE
Jul 19, 2023
1,105 days ago
CVE Severity & Scoring
Spectrum Protect Client9 CVEs
44%
56%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local4 (44.4%)
Network5 (55.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (88.9%)
High1 (11.1%)
Unknown0 (0.0%)
User Interaction
None8 (88.9%)
Unknown0 (0.0%)
Required1 (11.1%)
Privileges Required
Low5 (55.6%)
High0 (0.0%)
None4 (44.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-22474HIGH IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockets. This can result in a denial of servi | Jun 30, 2022 | 7.5 | 25 | NO | NO |
CVE-2021-29672HIGH IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. | Apr 26, 2021 | 7.8 | 25 | NO | NO |
CVE-2018-1785HIGH IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM | Sep 26, 2018 | 7.5 | 24 | NO | NO |
CVE-2018-1545HIGH IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informatio | Sep 26, 2018 | 7.5 | 24 | NO | NO |
CVE-2022-22478MEDIUM IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886. | Jun 30, 2022 | 5.5 | 21 | NO | NO |
CVE-2020-4494HIGH IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), | Jun 15, 2020 | 7.5 | 20 | NO | NO |
CVE-2020-4406MEDIUM IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), | Jun 15, 2020 | 5.4 | 20 | NO | NO |
CVE-2021-20546MEDIUM IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer an | Apr 26, 2021 | 5.5 | 19 | NO | NO |
CVE-2023-33832MEDIUM IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality. IBM X-Force | Jul 19, 2023 | 4.7 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Spectrum Protect Client
Top CWEs
Versions
No cataloged versions.