Vulnerability Details CVE-2021-39057
IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 214616.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.5%
CVSS Severity
CVSS v3 Score 4.2
CVSS v2 Score 5.5
References
Products affected by CVE-2021-39057
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.0
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.1
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.1.142
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.209
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.219
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.247
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.271
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.303
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.350
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.3
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.3.236
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.3.286
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.145
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.179
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.222
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.254
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.277
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5.2130
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5.2153
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5.2181
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5.2199
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.6
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.7
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.8
-
cpe:2.3:a:ibm:spectrum_protect_plus:10.1.8.1
-
cpe:2.3:o:linux:linux_kernel:-