Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: IBM Component: Spectrum Control Clear all filters
TI-2022-18017 CVE-2022-38391 · GHSA-5h2v-hw8m-9rhw

IBM Spectrum Control information disclosure

Priority LOW 33

IBM Spectrum Control 5.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00293 Published 2022-12-20 No fix listed CWE-327
TI-2019-03090 CVE-2019-4138 · GHSA-q9qq-hhhc-3c8x

Insufficiently protected credentials in IBM Spectrum Control Standard Edition

Priority LOW 31

IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02094 Published 2019-05-29 No fix listed CWE-522
TI-2019-03049 CVE-2019-4072 · GHSA-ffv4-58cg-f6v5

Insufficient session expiration in IBM Spectrum Control Standard Edition

Priority LOW 29

IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00797 Published 2019-05-09 No fix listed CWE-613
TI-2019-03048 CVE-2019-4071 · GHSA-gpmw-2pfx-6xxm

CSV injection in IBM Spectrum Control Standard Edition

Priority MEDIUM 45

IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file con…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04302 Published 2019-05-09 No fix listed CWE-1236
TI-2016-07339 CVE-2016-8942 · GHSA-mxgv-84g2-jxg6

Improper access control in IBM Spectrum Control Standard Select Edition

Priority LOW 16

IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server.

CVSS 3.0LOW 3.1 Network Low privileges No interaction EPSS 0.00491 Published 2017-02-01 No fix listed CWE-284
TI-2016-07338 CVE-2016-8941 · GHSA-86qj-gcg9-hf8g

Cross-site request forgery in IBM Spectrum Control Standard Select Edition

Priority LOW 39

IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00554 Published 2017-02-01 No fix listed CWE-352
TI-2016-05134 CVE-2016-5944 · GHSA-jgh4-jhhw-f27m

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly…

Priority LOW 26

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to inject arbitrary web script or HTML vi…

CVSS 3.0MEDIUM 5.4 Network No auth User interaction EPSS 0.00816 Published 2016-09-26 No fix listed CWE-79
TI-2016-05133 CVE-2016-5943 · GHSA-h3g4-q7jg-pp54

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11…

Priority LOW 26

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified v…

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00865 Published 2016-09-26 No fix listed CWE-284