Known vulnerabilities in Storage Defender - Resiliency Service

Vendor: IBM Corporation
Software: Storage Defender - Resiliency Service
Software CPE: cpe:2.3:a:ibm_corporation:storage_defender_-_resiliency_service:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 80
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Defender - Resiliency Service Storage Defender - Resiliency Service is affected by 80 known vulnerabilities: 16 high, 47 medium, 17 low Critical High Medium Low

Vulnerabilities (80)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007		 CWE-345 Medium
No
No
 2.1.3 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 28 more
#VU123482 - Permissions, Privileges, and Access Controls
CVE-2026-25674		 CWE-264 Low
No
No
 2.1.3 03.03.2026 SB2026030347
SB2026030574
SB2026030672
and 12 more
#VU123481 - Resource Management Errors
CVE-2026-25673		 CWE-399 Medium
No
No
 2.1.3 03.03.2026 SB2026030347
SB2026042114
SB2026060617
#VU123141 - Information Exposure Through Log Files
CVE-2025-64650		 CWE-532 High
No
No
 - 23.02.2026 SB2026022346
#VU123124 - Improper Handling of Windows Device Names
CVE-2026-27199		 CWE-67 Medium
No
No
 2.1.3 23.02.2026 SB2026022322
SB2026030633
SB2026040615
and 9 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 2.1.3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 2.1.3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 2.1.3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 89 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 2.1.3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 91 more
#VU120975 - Cryptographic Issues
CVE-2025-69277		 CWE-310 Medium
No
No
 2.1.3 06.01.2026 SB2026010617
SB2026010621
SB2026010861
and 17 more
#VU118131 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-64459		 CWE-89 Medium
Available
No
 - 05.11.2025 SB2025110551
SB2025110552
SB2025111466
and 14 more
#VU118130 - Resource exhaustion
CVE-2025-64458		 CWE-400 Medium
No
No
 - 05.11.2025 SB2025110551
SB2025111466
SB2025111467
and 6 more
#VU117436 - Allocation of Resources Without Limits or Throttling
CVE-2025-8916		 CWE-770 Medium
No
No
 2.0.18 21.10.2025 SB2025102223
SB2025102241
SB2025102248
and 35 more
#VU116427 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59682		 CWE-22 Medium
No
No
 2.0.18 03.10.2025 SB2025100337
SB2025100340
SB2025100647
and 14 more
#VU116426 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-59681		 CWE-89 High
No
No
 2.0.18 03.10.2025 SB2025100337
SB2025100340
SB2025100647
and 12 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 2.0.18 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU115166 - Uncontrolled Recursion
CVE-2025-9714		 CWE-674 Medium
No
No
 - 11.09.2025 SB2025091153
SB2025091154
SB2025091275
and 34 more
#VU112994 - NULL Pointer Dereference
CVE-2025-32990		 CWE-476 Low
No
No
 2.0.18 16.07.2025 SB20250716122
SB20250716123
SB20250716124
and 79 more
#VU112992 - Heap-based Buffer Overflow
CVE-2025-32989		 CWE-122 High
No
No
 2.0.18 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 46 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 2.0.18 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more


Showing elements 1 - 20 out of 80