Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

57 records in Spectrum Scale · all components

Priority HIGH 74

IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.66298 Published 2020-03-31 No fix listed CWE-78
Priority MEDIUM 45

IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0459 Published 2020-03-31 No fix listed CWE-78
TI-2019-03440 CVE-2019-4715 · GHSA-4whf-mx4r-v53w

OS command injection in IBM Spectrum Scale

Priority MEDIUM 45

IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03976 Published 2019-12-11 No fix listed CWE-78
Priority MEDIUM 40

A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0071 Published 2022-05-24 No fix listed CWE-862
TI-2016-05248 CVE-2016-6115 · GHSA-jr3g-j96x-665p

Memory corruption in IBM Spectrum Scale

Priority LOW 38

IBM General Parallel File System is vulnerable to a buffer overflow.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.03954 Published 2017-02-01 No fix listed CWE-119
TI-2021-10366 CVE-2021-29667 · GHSA-9323-phpc-vqqm

CSV injection in IBM Spectrum Scale

Priority LOW 36

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0117 Published 2021-04-27 No fix listed CWE-1236
TI-2020-04151 CVE-2020-4927 · GHSA-33gc-vmgr-56fc

IBM Spectrum Scale information disclosure

Priority LOW 36

A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00347 Published 2023-03-15 Fixed in 5.1.6.1 CWE-200
TI-2019-03340 CVE-2019-4558 · GHSA-cpr5-57mx-chhm

Injection in IBM Spectrum Scale

Priority LOW 36

A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 that could allow a local attacker to obtain root privilege by i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01167 Published 2019-10-09 No fix listed CWE-74
Priority LOW 34

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00792 Published 2020-05-27 No fix listed CWE-327
Priority LOW 34

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00792 Published 2020-05-27 No fix listed CWE-327
Priority LOW 34

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00792 Published 2020-05-27 No fix listed CWE-327
TI-2022-21521 CVE-2022-43843 · GHSA-x2j8-43mr-3q57

IBM Spectrum Scale information disclosure

Priority LOW 33

IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2023-12-14 No fix listed CWE-327
TI-2022-19258 CVE-2022-40607 · GHSA-76w5-p7qg-p8gv

IBM Spectrum Scale directory traversal

Priority LOW 32

IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00985 Published 2022-12-19 No fix listed CWE-22
TI-2022-21540 CVE-2022-43869 · GHSA-c577-76q8-rjr3

IBM Spectrum Scale denial of service

Priority LOW 31

IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00994 Published 2023-02-08 Fixed in 6.1.2.4, 5.1.2.8 +1 CWE-134
Priority LOW 31

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of servic…

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00335 Published 2020-05-19 No fix listed CWE-20
Priority LOW 31

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment varia…

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00296 Published 2016-11-25 No fix listed CWE-264
Priority LOW 31

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line para…

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00296 Published 2016-11-25 No fix listed CWE-264
Load more
Open these records in search →