CVE-2022-22474

HIGH 7.5CVE-2022-22474 · Published 30/06/2022 · updated 17/06/2026

In short

CVE-2022-22474 is a HIGH (CVSS 7.5) vulnerability affecting spectrum protect client (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spectrum protect client ibm	`≥ 8.1.0.0, ≤ 8.1.14.0`	No fix yet

Description

IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockets. This can result in a denial of service for IBM Spectrum Protect client operations. IBM X-Force ID: 225348.

References

exchange.xforce.ibmcloud.com/vulnerabilities/225348 · VDB Entry
ibm.com/support/pages/node/6596741 · Patch

More vulnerabilities in spectrum protect client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

spectrum protect client

ibm

≥ 8.1.0.0, ≤ 8.1.14.0

No fix yet

More vulnerabilities in spectrum protect client

See all →