Spectrum Virtualize
Vendor:
First CVE: May 17, 2018 · Active for 8 years
17
Total CVEs
More Total CVEs than 93% of tracked products
2.8
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 43% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Spectrum Virtualize over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 17, 2018
8 years ago
Most Recent CVE
Mar 5, 2024
871 days ago
CVE Severity & Scoring
Spectrum Virtualize17 CVEs
47%
47%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network17 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (82.4%)
High3 (17.6%)
Unknown0 (0.0%)
User Interaction
None15 (88.2%)
Unknown0 (0.0%)
Required2 (11.8%)
Privileges Required
Low11 (64.7%)
High0 (0.0%)
None6 (35.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (17 CVEs).
17 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-38969CRITICAL IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of support generated credentials. IBM X-Force ID: 212609. | May 11, 2022 | 9.8 | 29 | NO | NO |
CVE-2022-43873HIGH An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system. IBM X-Force | Feb 22, 2023 | 8.8 | 27 | NO | NO |
CVE-2020-4686HIGH IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 1866 | Aug 17, 2020 | 8.1 | 26 | NO | NO |
CVE-2018-1434HIGH IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 8.8 | 26 | NO | NO |
CVE-2021-29873HIGH IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force | Oct 21, 2021 | 8.1 | 25 | NO | NO |
CVE-2018-1433HIGH IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 7.5 | 25 | NO | NO |
CVE-2023-27870HIGH
IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IBM X-Force ID: 249518. | May 11, 2023 | 7.5 | 24 | NO | NO |
CVE-2018-1464MEDIUM IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 6.5 | 24 | NO | NO |
CVE-2018-1462HIGH IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 7.6 | 24 | NO | NO |
CVE-2018-1438HIGH IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1 | May 17, 2018 | 7.5 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (17 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (17 CVEs).
Media Mentions
Signals from CVEs in this product scope (17 CVEs).
Top CNAs Publishing CVEs For Spectrum Virtualize
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.5.0.0 | 4 | 6.9 | 0.6% | 0 | 0 |
| 8.5 | 1 | 7.5 | 0.7% | 0 | 0 |
| 8.4.0.0 | 4 | 7.8 | 0.6% | 0 | 0 |
| 8.3.1 | 1 | 8.1 | 1.6% | 0 | 0 |
| 8.3.0.0 | 4 | 7.8 | 0.6% | 0 | 0 |
| 8.2.0.0 | 3 | 8.2 | 0.6% | 0 | 0 |
| 7.8.0.0 | 1 | 5.9 | 0.5% | 0 | 0 |