CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2022-22494
https://notcve.org/view.php?id=CVE-2022-22494
30 Jun 2022 — IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940. IBM Spectrum Protect Operations Center 8.1.0.000 hasta 8.1.14, podría permitir a un atacante remoto conseguir detalles de la base de datos, como el tipo y la versión, mediante el envío de una petición HTTP especialmente diseñada. Esta ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/226940 •
CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-22485
https://notcve.org/view.php?id=CVE-2022-22485
17 Jun 2022 — In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325. En algunos casos, un intento fallido de iniciar sesión en IBM Spectrum Protect Operations Center versione... • https://exchange.xforce.ibmcloud.com/vulnerabilities/226325 • CWE-307: Improper Restriction of Excessive Authentication Attempts •
CVSS: 4.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-22348
https://notcve.org/view.php?id=CVE-2022-22348
14 Mar 2022 — IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139. IBM Spectrum Protect Operations Center versiones 8.1.0.000 hasta 8.1.13.xxx, es vulnerable un tabnabbing inve... • https://exchange.xforce.ibmcloud.com/vulnerabilities/220139 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-22346
https://notcve.org/view.php?id=CVE-2022-22346
14 Mar 2022 — IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 220048. IBM Spectrum Protect Operations Center versiones 8.1.0.000 hasta 8.1.13.xxx, es vulnerable a una vulnerabilidad de tipo cross-site request forgery, lo que podría permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas desde u... • https://exchange.xforce.ibmcloud.com/vulnerabilities/220048 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 4.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4956
https://notcve.org/view.php?id=CVE-2020-4956
15 Feb 2021 — IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156. IBM Spectrum Protect Operations Center versiones 7.1 y 8.1, es vulnerable a una denegación de servicio, causada por un RPC... • https://exchange.xforce.ibmcloud.com/vulnerabilities/192156 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 8.0EPSS: 1%CPEs: 2EXPL: 0CVE-2020-4955
https://notcve.org/view.php?id=CVE-2020-4955
15 Feb 2021 — IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet request with specially crafted input parameters, an attacker could exploit this vulnerability to load a malicious .dll with elevated privileges. IBM X-Force ID: 192155. IBM Spectrum Protect Operations Center versiones 7.1 y 8.1, podría permitir a un atacante remoto ejecutar código arbitrario en el sistema, causado... • https://exchange.xforce.ibmcloud.com/vulnerabilities/192155 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4954
https://notcve.org/view.php?id=CVE-2020-4954
15 Feb 2021 — IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper session validation . By using the configuration panel to obtain a valid session using an attacker controlled IBM Spectrum Protect server, an attacker could exploit this vulnerability to bypass authentication and gain access to a limited number of debug functions, such as logging levels. IBM X-Force ID: 192153. IBM Spectrum Protect Operations Center versiones 7.1 y 8.1, p... • https://exchange.xforce.ibmcloud.com/vulnerabilities/192153 • CWE-384: Session Fixation •
CVSS: 5.3EPSS: 0%CPEs: 5EXPL: 0CVE-2020-4771
https://notcve.org/view.php?id=CVE-2020-4771
23 Nov 2020 — IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a websocket endpoint. By using known tools to subscribe to the websocket event stream, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 188993. IBM Spectrum Protect Operations Center versiones 8.1.0.000 hasta 8.1.10. Y versiones 7.1.0.000 hasta 7.1.11, podría permitir a un ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/188993 • CWE-287: Improper Authentication •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2020-4693
https://notcve.org/view.php?id=CVE-2020-4693
02 Sep 2020 — IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782. IBM Spectrum Protect Operations Center versiones 7.1.0.000 hasta 7.1.10 y versiones 8.1.0.000 hasta 8.1.9, puede permitir a un atacante ejecutar código arbitrario en el sistema, causado por una comprobación inapropiada de los datos antes de la exportación. IBM X-Force ID: 18678... • https://exchange.xforce.ibmcloud.com/vulnerabilities/186782 • CWE-20: Improper Input Validation •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2019-4129
https://notcve.org/view.php?id=CVE-2019-4129
02 Jul 2019 — IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message containing a stack trace. By creating an error with a stack trace, an attacker could exploit this vulnerability to potentially obtain details on the Operations Center architecture. IBM X-Force ID: 158279. Spectrum Protect Operations Center versiones 7.1 y 8.1 de IBM, podría permitir a un atacante remoto conseguir información confidencial, causada por un mensaje de erro... • http://www.ibm.com/support/docview.wss?uid=ibm10883236 • CWE-209: Generation of Error Message Containing Sensitive Information •