Lucene search

K
ibmIBMC0276662C689772637EAF0F1EA697AAE7618A640211E05E14816B6C45314B710
HistoryJun 22, 2023 - 6:12 p.m.

Security Bulletin: IBM Storage Protect Operations Center is vulnerable to denial of service due to Java SE (CVE-2022-21426)

2023-06-2218:12:37
www.ibm.com
20

0.001 Low

EPSS

Percentile

41.9%

Summary

Java SE is used by IBM Storage Protect Operations Center and may be affected by this vulnerability.

Vulnerability Details

CVEID:CVE-2022-21426
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the JAXP component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/224714 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Storage Protect Operations Center 8.1

Remediation/Fixes

IBM Storage Protect Operations Center Affected Versions Fixing Level Platform Link to Fix and Instructions
8.1.0.000 - 8.1.18.xxx 8.1.19 AIX, Linux, Windows <https://www.ibm.com/support/pages/node/6988821&gt;

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm spectrum protecteq8.1