Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-28956	Modificada	Alta (7.8)	0.16%	—	IBM Spectrum Protect Backup-archive Client	22/6/2023	17/6/2026	IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls.
CVE-2021-39048	Modificada	Media (5.5)	0.29%	—	IBM Spectrum Protect Backup-archive Client IBM Spectrum Protect FOR Space Management	13/12/2021	17/6/2026	IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 214438.
CVE-2021-20532	Modificada	Alta (7.8)	0.21%	—	IBM Spectrum Protect Backup-archive Client IBM Spectrum Protect FOR Virtual Environments	26/4/2021	17/6/2026	IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full control of the system due to insecure directory permissions. IBM X-Force ID: 198811.
CVE-2019-4406	Modificada	Media (4.4)	0.30%	—	IBM Spectrum Protect Backup-archive Client	25/11/2019	17/6/2026	IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477.
CVE-2018-1882	Modificada	Media (4.7)	0.22%	—	IBM Spectrum Protect Backup-archive Client IBM Spectrum Protect FOR Virtual Environments	8/4/2019	17/6/2026	In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968.
CVE-2018-1853	Modificada	Media (6.1)	1.2%	—	IBM Spectrum Protect Backup-archive Client	8/4/2019	17/6/2026	IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks…
CVE-2018-1787	Modificada	Media (5.5)	0.30%	—	IBM Spectrum Protect Backup-archive Client IBM Spectrum Protect FOR Virtual Environments	8/4/2019	17/6/2026	IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872.