IBM Spectrum Protect

productDE

cpe:/a:ibm:spectrum_protect:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical12high7medium1low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	—
CVE-2021-33026US	critical9.8	7.35% (94th)	Exploit	no fix	2021-05-13	—
CVE-2022-1473US	high7.5	4.68% (92nd)	—	no fix	2022-05-03	—
CVE-2021-23727US	high7.5	3.60% (89th)	—	no fix	2021-12-29	—
CVE-2022-21680US	high7.5	2.85% (87th)	—	no fix	2022-01-14	—
CVE-2022-21681US	high7.5	2.77% (86th)	—	no fix	2022-01-14	—
CVE-2022-1343US	medium5.3	2.14% (82nd)	—	no fix	2022-05-03	—
CVE-2021-20373US	high7.5	1.53% (75th)	—	no fix	2021-12-09	—
CVE-2022-1434US	medium5.9OT elevated	1.23% (69th)	—	no fix	2022-05-03	—
CVE-2021-38931US	medium6.5	1.20% (68th)	—	no fix	2021-12-09	—
CVE-2024-21217US	—	1.15% (67th)	—	no fix	2024-10-15	—
CVE-2021-29678US	high8.7OT elevated	1.13% (66th)	—	no fix	2021-12-09	—
CVE-2023-42950US	high8.8	1.07% (65th)	—	no fix	2024-03-28	—
CVE-2024-21208US	—	1.01% (63rd)	—	no fix	2024-10-15	—
CVE-2022-22354US	high7.5	0.94% (61st)	—	no fix	2022-03-14	—
CVE-2024-21235US	—	0.93% (60th)	—	no fix	2024-10-15	—
CVE-2021-39002US	high7.5OT elevated	0.92% (60th)	—	no fix	2021-12-09	—
CVE-2024-21210US	—	0.81% (57th)	—	no fix	2024-10-15	—
CVE-2019-11777US	high7.5	0.80% (56th)	—	no fix	2019-09-11	—
CVE-2022-22476US	high8.8	0.73% (54th)	—	no fix	2022-07-08	—
CVE-2024-21211US	—	0.67% (52nd)	—	no fix	2024-10-15	—
CVE-2022-22475US	medium6.5	0.65% (51st)	—	no fix	2022-05-17	—
CVE-2025-25193US	medium5.5	0.39% (33rd)	—	no fix	2025-02-10	—
CVE-2022-22346US	high8.8	0.38% (32nd)	—	no fix	2022-03-14	—
CVE-2021-38926US	medium5.5	0.35% (28th)	—	no fix	2021-12-09	—
CVE-2022-22348US	low2.4	0.20% (9th)	—	no fix	2022-03-14	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-404Improper Resource Shutdown or Release3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-1333Inefficient Regular Expression Complexity2 CVEs
CWE-186Overly Restrictive Regular Expression2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-203Observable Discrepancy2 CVEs
CWE-269Improper Privilege Management2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan