CVE-2022-22485medium

CVE-2022-22485: medium-severity vulnerability in IBM Spectrum Protect Server

Published · Updated

Follow this CVE+ Monitor Spectrum Protect Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 1.2%
In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325.
CVSS:3.0/AC:H/S:U/UI:N/AV:N/A:N/I:N/C:H/PR:N/RC:C/RL:O/E:U
Affected products
IBM · Spectrum Protect Server
Related CVEs — IBM Spectrum Protect Server

In the same product, most dangerous first.

CVE-2022-22394HIGHCVE-2022-22394EPSS 2.2%CVE-2022-22487MEDIUMCVE-2022-22487EPSS 1.5%CVE-2022-22496MEDIUMCVE-2022-22496EPSS 0.4%CVE-2025-3319HIGHIBM Spectrum Protect Server authentication bypassEPSS 0.4%CVE-2021-20491MEDIUMCVE-2021-20491EPSS 0.3%CVE-2020-4591LOWCVE-2020-4591EPSS 0.2%