Ibm Spectrum Control
13 CVEs affecting Ibm Spectrum Control. Latest disclosed: 2022-12-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-4071 | High | 8.8 | 2019-05-09 | IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands… |
CVE-2016-8941 | High | 8.8 | 2017-02-01 | IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… |
CVE-2016-5946 | Medium | 6.5 | 2016-09-26 | Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users t… |
CVE-2019-4072 | Medium | 6.3 | 2019-05-09 | IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even whe… |
CVE-2019-4137 | Medium | 6.1 | 2019-05-29 | IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr… |
CVE-2019-4138 | Medium | 5.9 | 2019-05-29 | IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly… |
CVE-2016-5947 | Medium | 5.7 | 2016-09-26 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a… |
CVE-2016-8943 | Medium | 5.4 | 2017-02-01 | IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2016-5944 | Medium | 5.4 | 2016-09-26 | Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote… |
CVE-2016-5943 | Medium | 5.4 | 2016-09-26 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions… |
CVE-2022-38391 | Medium | 5.1 | 2022-12-20 | IBM Spectrum Control 5.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force… |
CVE-2016-5945 | Medium | 4.3 | 2016-09-26 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a c… |
CVE-2016-8942 | Low | 3.1 | 2017-02-01 | IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the serve… |