CVE Feed

    Dashboard / CVE / CVE-2015-7426

    CVE-2015-7426

    The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 4.1 before 4.1.3.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

    Published:Jan 2, 2016
    Last Modified:Apr 12, 2025
    EPS:Jan 2, 2016
    EPSS Score:0.02726
    CVSS Score:10

    Affected Products

    Vendor
    Ibm
    Product
    Spectrum Protect For Virtual Environments
    Vendor
    Ibm
    Product
    Spectrum Protect Snapshot

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-33832 (CVSS 6.2) — IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due…
    CVE-2021-20532 (CVSS 7.8) — IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to …
    CVE-2018-2025 (CVSS 4.4) — IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creat…
    CVE-2018-1882 (CVSS 4.7) — In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in…
    CVE-2018-1787 (CVSS 5.1) — IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file perm…
    CVE-2018-1785 (CVSS 7.5) — IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorith…
    CVE-2018-1545 (CVSS 7.5) — IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorith…
    CVE-2018-1447 (CVSS 5.1) — The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS K…
    CVE-2015-7429 (CVSS 8.5) — The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data P…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High