Spectrum Protect Plus Security Vulnerabilities and Issues — Spectrum Protect Plus CVE List

Lucene search

IbmSpectrum Protect Plus

2 matches found

CVE•added 2020/09/15 2:15 p.m.•100 views

CVE-2020-4703

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. This vulnerability is due to an incomplete fix for CVE-2020-4470. IBM X-Force ID: 187188.

8CVSS7.8AI score0.00842EPSS

CVE•added 2020/09/15 2:15 p.m.•81 views

CVE-2020-4711

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 187501.

6.5CVSS6.3AI score0.00626EPSS