Known vulnerabilities in Storage Defender – Data Protect

Vendor: IBM Corporation
Software: Storage Defender – Data Protect
Software CPE: cpe:2.3:a:ibm_corporation:storage_defender_–_data_protect:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 110
Public exploits: 14
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Defender – Data Protect Storage Defender – Data Protect is affected by 110 known vulnerabilities: 1 critical, 16 high, 56 medium, 37 low Critical High Medium Low

Vulnerabilities (110)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 2.1.0 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Available
No
 2.1.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU111270 - Out-of-bounds write
CVE-2025-20260		 CWE-787 Critical
No
No
 2.1.0 18.06.2025 SB2025061842
SB20250620165
SB20250620166
and 11 more
#VU109936 - Use After Free
CVE-2025-32911		 CWE-416 High
No
No
 2.1.0 29.05.2025 SB2025052992
SB2025052997
SB2025052998
and 33 more
#VU101797 - Insecure Temporary File
CVE-2024-54661		 CWE-377 Low
No
No
 2.1.0 16.12.2024 SB2024121640
SB2024121649
SB2024121650
and 30 more
#VU100566 - Off-by-one Error
CVE-2024-52533		 CWE-193 High
No
No
 2.1.0 15.11.2024 SB20241115147
SB20241115148
SB20241115149
and 71 more
#VU99556 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-48910		 CWE-1321 Medium
No
No
 2.0.15 31.10.2024 SB2024103154
SB2024111356
SB2024112007
and 15 more
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875		 CWE-79 Medium
No
No
 2.0.15 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801		 CWE-1321 Medium
No
No
 2.0.11.1 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 2.1.4 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 97 more
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 2.1.4 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 2.1.4 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU59650 - Integer overflow
CVE-2022-22827		 CWE-190 High
No
No
 2.1.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 54 more
#VU59649 - Integer overflow
CVE-2022-22826		 CWE-190 High
No
No
 2.1.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 54 more
#VU59648 - Integer overflow
CVE-2022-22825		 CWE-190 High
No
No
 2.1.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU59647 - Integer overflow
CVE-2022-22824		 CWE-190 High
No
No
 2.1.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59646 - Integer overflow
CVE-2022-22823		 CWE-190 High
No
No
 2.1.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59645 - Integer overflow
CVE-2022-22822		 CWE-190 High
No
No
 2.1.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 59 more
#VU59643 - Integer overflow
CVE-2021-46143		 CWE-190 High
No
No
 2.1.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 58 more
#VU59642 - Resource exhaustion
CVE-2021-45960		 CWE-400 Medium
No
No
 2.1.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more


Showing elements 1 - 20 out of 110