CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
Percentile
51.2%
IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments (Data Protection for Hyper-V and Data Protection for VMware), and IBM Storage Protect for Space Management can be affected by vulnerabilities in IBM Java. The vulnerabilities can lead to denial of service, as described by the CVEs in the “Vulnerability Details” section.
CVEID:CVE-2022-21426
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the JAXP component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/224714 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVEID:CVE-2023-21830
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Serialization component could allow a remote attacker to cause a denial of service resulting in a low integrity impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/245038 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
CVEID:CVE-2023-21843
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Sound component could allow a remote attacker to cause a denial of service resulting in a low integrity impact using unknown attack vectors.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/245037 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected Product(s) | Version(s) |
---|---|
IBM Storage Protect Client | 8.1.0.0 - 8.1.17.2 |
IBM Storage Protect for Virtual Environments | 8.1.0.0 - 8.1.17.2 |
IBM Storage Protect for Space Management | 8.1.0.0 - 8.1.17.2 |
**Product ** | Fixing level | Platforms | Link to fix and instructions |
---|---|---|---|
IBM Storage Protect Backup-Archive Client | 8.1.19.0 | AIX | |
HP-UX | |||
Linux | |||
Macintosh | |||
Solaris | |||
Windows | <https://www.ibm.com/support/pages/node/6989101> | ||
IBM Storage Protect for Space Management | 8.1.19.0 | AIX | |
Linux | <https://www.ibm.com/support/pages/node/6989089> | ||
IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V | 8.1.19.0 | Windows | <https://www.ibm.com/support/pages/node/6989083> |
IBM Storage Protect for Virtual Environments: Data Protection for VMware | 8.1.19.0 | Linux | |
Windows | <https://www.ibm.com/support/pages/node/6989083> |
None
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | spectrum_protect_for_space_management | 8.1. | cpe:2.3:a:ibm:spectrum_protect_for_space_management:8.1.:*:*:*:*:*:*:* |
ibm | storage_protect_for_virtual_environments | 8.1. | cpe:2.3:a:ibm:storage_protect_for_virtual_environments:8.1.:*:*:*:*:*:*:* |
ibm | storage_protect | 8.1. | cpe:2.3:a:ibm:storage_protect:8.1.:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
Percentile
51.2%