Spectrum Protect Server vulnerabilities

3 known vulnerabilities in Spectrum Protect Server from IBM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Spectrum Protect Server: Missing Authentication for Critical Functionality

  CVE-2025-3319Jun 20, 2025IBM

  IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access to unauthorized resources.

• 9.8 Critical severity

  Spectrum Protect Server: Improper Restriction of Excessive Authentication Attempts

  CVE-2022-22487Jun 30, 2022IBMEPSS 1.51%

  An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage agent without locking the administrative ID. A remote attacker could exploit this vulnerability using bru

• 9.8 Critical severity

  Spectrum Protect Server: Improper Restriction of Excessive Authentication Attempts

  CVE-2022-22485Jun 17, 2022IBMEPSS 1.16%

  In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this