Lucene search

K
ibmIBM872702CED8F809873181556FCDABD834505891905F84F9FD73AD4986528D55FF
HistoryJun 22, 2023 - 6:30 p.m.

Security Bulletin: IBM Storage Protect Server is vulnerable to denial of service due to Java SE (CVE-2022-21426)

2023-06-2218:30:31
www.ibm.com
5

0.001 Low

EPSS

Percentile

41.9%

Summary

Java SE is used by the IBM Storage Protect Server and may be affected by this vulnerability.

Vulnerability Details

CVEID:CVE-2022-21426
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the JAXP component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/224714 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Storage Protect Server 8.1

Remediation/Fixes

IBM Storage Protect Server Affected Versions Fixing Level Platform Link to Fix and Instructions
8.1.0.000 - 8.1.18.xxx 8.1.19 AIX, Linux, Windows <https://www.ibm.com/support/pages/node/6988821&gt;

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm spectrum protecteq8.1