CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-4415

IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker to execute arbitrary code on the system with the privileges of an administrator or user associated with the Spectrum Protect server or cause the Spectrum Protect server to crash. IBM X-Force ID: 179990.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.246

EPSS Ranking 95.8%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2020-4415

Ibm » Spectrum Protect » Version: 7.1.0.0

cpe:2.3:a:ibm:spectrum_protect:7.1.0.0
Ibm » Spectrum Protect » Version: 7.1.0.000

cpe:2.3:a:ibm:spectrum_protect:7.1.0.000
Ibm » Spectrum Protect » Version: 7.1.10.0

cpe:2.3:a:ibm:spectrum_protect:7.1.10.0
Ibm » Spectrum Protect » Version: 7.1.10.000

cpe:2.3:a:ibm:spectrum_protect:7.1.10.000
Ibm » Spectrum Protect » Version: 7.1.8.2

cpe:2.3:a:ibm:spectrum_protect:7.1.8.2
Ibm » Spectrum Protect » Version: 7.1.8.3

cpe:2.3:a:ibm:spectrum_protect:7.1.8.3
Ibm » Spectrum Protect » Version: 7.1.8.4

cpe:2.3:a:ibm:spectrum_protect:7.1.8.4
Ibm » Spectrum Protect » Version: 7.1.8.5

cpe:2.3:a:ibm:spectrum_protect:7.1.8.5
Ibm » Spectrum Protect » Version: 7.1.8.6

cpe:2.3:a:ibm:spectrum_protect:7.1.8.6
Ibm » Spectrum Protect » Version: 7.1.9.200

cpe:2.3:a:ibm:spectrum_protect:7.1.9.200
Ibm » Spectrum Protect » Version: 7.1.9.300

cpe:2.3:a:ibm:spectrum_protect:7.1.9.300
Ibm » Spectrum Protect » Version: 8.1.0.0

cpe:2.3:a:ibm:spectrum_protect:8.1.0.0
Ibm » Spectrum Protect » Version: 8.1.0.000

cpe:2.3:a:ibm:spectrum_protect:8.1.0.000
Ibm » Spectrum Protect » Version: 8.1.1

cpe:2.3:a:ibm:spectrum_protect:8.1.1
Ibm » Spectrum Protect » Version: 8.1.1.100

cpe:2.3:a:ibm:spectrum_protect:8.1.1.100
Ibm » Spectrum Protect » Version: 8.1.1.200

cpe:2.3:a:ibm:spectrum_protect:8.1.1.200
Ibm » Spectrum Protect » Version: 8.1.1.300

cpe:2.3:a:ibm:spectrum_protect:8.1.1.300
Ibm » Spectrum Protect » Version: 8.1.1.400

cpe:2.3:a:ibm:spectrum_protect:8.1.1.400
Ibm » Spectrum Protect » Version: 8.1.2

cpe:2.3:a:ibm:spectrum_protect:8.1.2
Ibm » Spectrum Protect » Version: 8.1.3

cpe:2.3:a:ibm:spectrum_protect:8.1.3
Ibm » Spectrum Protect » Version: 8.1.4

cpe:2.3:a:ibm:spectrum_protect:8.1.4
Ibm » Spectrum Protect » Version: 8.1.4.1

cpe:2.3:a:ibm:spectrum_protect:8.1.4.1
Ibm » Spectrum Protect » Version: 8.1.4.2

cpe:2.3:a:ibm:spectrum_protect:8.1.4.2
Ibm » Spectrum Protect » Version: 8.1.5

cpe:2.3:a:ibm:spectrum_protect:8.1.5
Ibm » Spectrum Protect » Version: 8.1.5.100

cpe:2.3:a:ibm:spectrum_protect:8.1.5.100
Ibm » Spectrum Protect » Version: 8.1.6

cpe:2.3:a:ibm:spectrum_protect:8.1.6
Ibm » Spectrum Protect » Version: 8.1.6.0

cpe:2.3:a:ibm:spectrum_protect:8.1.6.0
Ibm » Spectrum Protect » Version: 8.1.6.1

cpe:2.3:a:ibm:spectrum_protect:8.1.6.1
Ibm » Spectrum Protect » Version: 8.1.6.100

cpe:2.3:a:ibm:spectrum_protect:8.1.6.100
Ibm » Spectrum Protect » Version: 8.1.6.200

cpe:2.3:a:ibm:spectrum_protect:8.1.6.200
Ibm » Spectrum Protect » Version: 8.1.7

cpe:2.3:a:ibm:spectrum_protect:8.1.7
Ibm » Spectrum Protect » Version: 8.1.7.0

cpe:2.3:a:ibm:spectrum_protect:8.1.7.0
Ibm » Spectrum Protect » Version: 8.1.7.1

cpe:2.3:a:ibm:spectrum_protect:8.1.7.1
Ibm » Spectrum Protect » Version: 8.1.8.0

cpe:2.3:a:ibm:spectrum_protect:8.1.8.0
Ibm » Spectrum Protect » Version: 8.1.8.100

cpe:2.3:a:ibm:spectrum_protect:8.1.8.100
Ibm » Spectrum Protect » Version: 8.1.8.200

cpe:2.3:a:ibm:spectrum_protect:8.1.8.200
Ibm » Spectrum Protect » Version: 8.1.9

cpe:2.3:a:ibm:spectrum_protect:8.1.9
Ibm » Spectrum Protect » Version: 8.1.9.0

cpe:2.3:a:ibm:spectrum_protect:8.1.9.0
Ibm » Spectrum Protect » Version: 8.1.9.1

cpe:2.3:a:ibm:spectrum_protect:8.1.9.1
Ibm » Spectrum Protect » Version: 8.1.9.100

cpe:2.3:a:ibm:spectrum_protect:8.1.9.100
Ibm » Spectrum Protect » Version: 8.1.9.200

cpe:2.3:a:ibm:spectrum_protect:8.1.9.200

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-4415

Products

Pricing

Contact Us