Lucene search
+L

4 matches found

Circl
Circl
added 2021/12/13 10:12 p.m.7 views

CVE-2021-39057

creationtimestamp| type| source ---|---|--- 2021-12-13 22:12:14+00:00| seen| https://t.me/cibsecurity/33878...

8.1CVSS5.3AI score0.00486EPSS
Exploits0References1
OSV
OSV
added 2021/12/13 7:15 p.m.5 views

CVE-2021-39057

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 214616...

8.1CVSS7.1AI score0.00486EPSS
Exploits0References2
CVE
CVE
added 2021/12/13 6:35 p.m.54 views

CVE-2021-39057

IBM Spectrum Protect Plus (10.1.0.0–10.1.8.x) is affected by a server‑side request forgery (SSRF) vulnerability due to insufficient input filtering/validation on the server. An authenticated attacker could send unauthorized requests from the vulnerable system, enabling network enumeration and fac...

8.1CVSS7.7AI score0.00486EPSS
Exploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/10 9:3 p.m.27 views

Security Bulletin: IBM Spectrum Protect Plus is vulnerable to SSRF, MITM, and CORS attacks

Summary IBM Spectrum Protect Plus is vulnerable to Server-Side Request Forgery SSRF, Man-in-the-Middle MITM attack, and Cross-Origin Resource Sharing CORS attack. Vulnerability Details CVEID: CVE-2021-39057 DESCRIPTION: IBM Spectrum Protect Plus is vulnerable to server-side request forgery SSRF...

9.1CVSS6.6AI score0.00659EPSS
Exploits0Affected Software1
Rows per page
Query Builder