IBM Spectrum Protect Plus

Name: IBM Spectrum Protect Plus
Brand: IBM

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

15critical448high1226medium16low

updated 2026-10-27

vulnerabilities (2,062)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-41993US	high8.8OT critical	24.3% (98th)	KEV	10.1.17.1	2023-09-21	2 versions
CVE-2024-36971US	high7.8OT critical	2.70% (86th)	KEV	10.1.6.4	2024-06-10	< 10.1.6.4
CVE-2023-45288US	—	92.0% (100th)	Exploit	10.1.16.2	2024-04-04	< 10.1.16.2
CVE-2024-27316US	high7.5	91.3% (100th)	Exploit	10.1.16.2	2024-04-04	< 10.1.16.2
CVE-2024-2961US	—	88.3% (100th)	Exploit	10.1.17.1	2024-04-17	2 versions
CVE-2024-30255US	high7.5	87.8% (100th)	Exploit	10.1.16.2	2024-04-04	< 10.1.16.2
CVE-2024-41110US	—OT elevated	16.5% (97th)	Exploit	10.1.17.1	2024-07-24	2 versions
CVE-2019-20372US	medium5.3	15.0% (97th)	Exploit	10.1.16.2	2020-01-09	< 10.1.16.2
CVE-2021-33026US	critical9.8	7.35% (94th)	Exploit	10.1.6.4	2021-05-13	< 10.1.6.4
CVE-2023-39325US	high7.5	3.80% (90th)	Exploit	10.1.17.1	2023-10-11	2 versions
CVE-2024-34069US	—	3.40% (89th)	Exploit	10.1.17	2024-05-06	< 10.1.17
CVE-2024-26581US	high7.8OT elevated	2.22% (83rd)	Exploit	10.1.17	2024-02-20	< 10.1.17
CVE-2023-47108US	high7.5	2.03% (81st)	Exploit	10.1.6.4	2023-11-10	< 10.1.6.4
CVE-2023-39320US	critical9.8	1.76% (78th)	Exploit	10.1.16.2	2023-09-08	< 10.1.16.2
CVE-2024-36886US	high7.8	1.31% (70th)	Exploit	10.1.6.4	2024-05-30	2 versions
CVE-2023-30861US	high7.5	1.26% (69th)	Exploit	10.1.17.1	2023-05-02	< 10.1.17.1
CVE-2024-0406US	high7.8	0.93% (60th)	Exploit	10.1.17.1	2024-04-06	2 versions
CVE-2024-45590US	high7.5	0.82% (57th)	Exploit	10.1.17.1	2024-09-10	2 versions
CVE-2024-24787US	—	0.77% (55th)	Exploit	10.1.16.2	2024-05-08	2 versions
CVE-2024-33883US	—	0.61% (49th)	Exploit	10.1.17.1	2024-04-28	2 versions
CVE-2025-22870US	—	0.43% (37th)	Exploit	10.1.17.1	2025-03-12	< 10.1.17.1
CVE-2024-31309US	—	94.6% (100th)	—	10.1.16.2	2024-04-10	< 10.1.16.2
CVE-2024-27919US	—	86.7% (100th)	—	10.1.16.2	2024-04-04	< 10.1.16.2
CVE-2024-28182US	—	85.0% (100th)	—	10.1.16.2	2024-04-04	< 10.1.16.2
CVE-2024-2653US	—	83.4% (100th)	—	10.1.16.2	2024-04-03	< 10.1.16.2
CVE-2024-2758US	—	72.8% (99th)	—	10.1.16.2	2024-04-03	< 10.1.16.2
CVE-2020-4211US	critical9.8	71.1% (99th)	—	no fix	2020-02-24	2 versions
CVE-2024-6119US	high7.5	66.6% (99th)	—	10.1.17.1	2024-09-03	2 versions
CVE-2020-4241US	high8.8	66.3% (99th)	—	no fix	2020-03-31	2 versions
CVE-2024-2511US	—	52.4% (99th)	—	10.1.17	2024-04-08	< 10.1.17
CVE-2024-26594US	high7.1	51.2% (99th)	—	10.1.17	2024-02-23	3 versions
CVE-2024-2398US	—	36.1% (98th)	—	10.1.6.4	2024-03-27	2 versions
CVE-2023-52755US	—	28.1% (98th)	—	10.1.6.4	2024-05-21	2 versions
CVE-2024-6409US	—	27.9% (98th)	—	10.1.6.4	2024-07-08	< 10.1.6.4
CVE-2020-4222US	critical9.8	15.5% (97th)	—	no fix	2020-02-24	2 versions
CVE-2020-4213US	critical9.8	15.5% (97th)	—	no fix	2020-02-24	2 versions
CVE-2020-4210US	critical9.8	15.5% (97th)	—	no fix	2020-02-24	2 versions
CVE-2020-4212US	critical9.8	15.0% (97th)	—	no fix	2020-02-24	2 versions
CVE-2020-4469US	critical9.8	13.4% (96th)	—	no fix	2020-06-15	2 versions
CVE-2024-2201US	—	8.79% (95th)	—	10.1.6.4	2024-12-19	< 10.1.6.4
CVE-2022-25869US	medium6.1	7.68% (95th)	—	10.1.16.3	2022-07-15	2 versions
CVE-2020-4206US	high8.8	4.61% (92nd)	—	no fix	2020-03-31	2 versions
CVE-2020-4242US	high8.8	4.59% (92nd)	—	no fix	2020-03-31	2 versions
CVE-2023-5869US	high8.8	4.32% (91st)	—	10.1.16.3	2023-12-10	< 10.1.16.3
CVE-2018-15209US	high8.8	3.92% (90th)	—	10.1.6.4	2018-08-08	< 10.1.6.4
CVE-2021-23727US	high7.5	3.60% (89th)	—	10.1.6.4	2021-12-29	< 10.1.6.4
CVE-2022-24795US	high7.5	3.47% (89th)	—	10.1.6.4	2022-04-05	2 versions
CVE-2022-21680US	high7.5	2.85% (87th)	—	10.1.6.4	2022-01-14	< 10.1.6.4
CVE-2023-5868US	medium4.3	2.77% (86th)	—	10.1.16.3	2023-12-10	< 10.1.16.3
CVE-2022-21681US	high7.5	2.77% (86th)	—	10.1.6.4	2022-01-14	< 10.1.6.4

showing 50 of 2,062

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference393 CVEs
CWE-20Improper Input Validation265 CVEs
CWE-416Use After Free227 CVEs
CWE-667Improper Locking173 CVEs
CWE-401Missing Release of Memory after Effective Lifetime166 CVEs
CWE-125Out-of-bounds Read130 CVEs
CWE-787Out-of-bounds Write115 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')113 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)2,014 CVEs
EUEU Vulnerability Database (ENISA)49 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan