CVE-2022-43873

MEDIUM

IBM Spectrum Virtualize <8.6 - Privilege Escalation

Title source: llm

Description

An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system. IBM X-Force ID: 239847.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory

https://www.ibm.com/support/pages/node/6858047

VDB Entry, Vendor Advisory vdb-entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/239847

Scores

CVSS v3 6.3

EPSS 0.0051

EPSS Percentile 66.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

Status published

Products (4)

ibm/spectrum_virtualize 8.2.0.0

ibm/spectrum_virtualize 8.3.0.0

ibm/spectrum_virtualize 8.4.0.0

ibm/spectrum_virtualize 8.5.0.0

Published Feb 22, 2023

Tracked Since Feb 18, 2026