Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

17 records in Spectrum Copy Data Management · all components

Priority MEDIUM 46

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Ad…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02239 Published 2021-12-13 No fix listed CWE-78
Priority LOW 38

IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website t…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00349 Published 2022-06-10 No fix listed CWE-352
Priority LOW 36

IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01434 Published 2021-12-13 No fix listed CWE-287
Priority LOW 30

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00851 Published 2022-03-14 No fix listed CWE-918
Priority LOW 28

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00634 Published 2022-03-14 No fix listed CWE-74
Priority LOW 26

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00677 Published 2022-06-10 No fix listed CWE-79
Priority LOW 25

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00607 Published 2021-12-13 No fix listed CWE-1021
Priority LOW 22

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from within IBM Spectrum Copy Data Management to rewrite it.

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.00593 Published 2022-06-10 No fix listed CWE-269
Open these records in search →