Priority MEDIUM 46
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Ad…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02239 · Published 2021-12-13 · No fix listed CWE-78
Priority MEDIUM 44
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01177 · Published 2021-12-13 · No fix listed
Priority LOW 38
IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website t…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00349 · Published 2022-06-10 · No fix listed CWE-352
Priority LOW 36
IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01434 · Published 2021-12-13 · No fix listed CWE-287
Priority LOW 36
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests for Spectrum Copy Data Management Admin Console.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01735 · Published 2021-12-13 · No fix listed
Priority LOW 35
IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack t…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00941 · Published 2022-03-14 · No fix listed
Priority LOW 34
IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00687 · Published 2021-12-13 · No fix listed CWE-327
Priority LOW 34
IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00687 · Published 2021-12-13 · No fix listed CWE-326
Priority LOW 30
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00851 · Published 2022-03-14 · No fix listed CWE-918
Priority LOW 28
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00634 · Published 2022-03-14 · No fix listed CWE-74
Priority LOW 27
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01234 · Published 2022-06-10 · No fix listed
Priority LOW 26
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00677 · Published 2022-06-10 · No fix listed CWE-79
Priority LOW 25
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0048 · Published 2022-03-14 · No fix listed CWE-79
Priority LOW 25
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00607 · Published 2021-12-13 · No fix listed CWE-1021
Priority LOW 25
A flaw was found in the Linux kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2022-08-26 · Partial fix CWE-400
Priority LOW 22
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from within IBM Spectrum Copy Data Management to rewrite it.
CVSS 3.1MEDIUM 4.5· Network · High privileges · User interaction · EPSS 0.00593 · Published 2022-06-10 · No fix listed CWE-269
Priority LOW 16
IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session management.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00239 · Published 2022-06-10 · No fix listed