Known vulnerabilities in Storage Defender Copy Data Management

Vendor: IBM Corporation
Software: Storage Defender Copy Data Management
Software CPE: cpe:2.3:a:ibm_corporation:storage_defender_copy_data_management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 55
Public exploits: 6
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Defender Copy Data Management Storage Defender Copy Data Management is affected by 55 known vulnerabilities: 13 high, 32 medium, 10 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132377 - Always-Incorrect Control Flow Implementation
CVE-2026-41988		 CWE-670 Low
No
No
 2.3.1.0 27.05.2026 SB2026052767
SB2026052768
SB20260528259
and 12 more
#VU131178 - Information Exposure Through Timing Discrepancy
CVE-2026-43514		 CWE-208 Low
No
No
 2.3.1.0 12.05.2026 SB2026051281
SB2026051592
SB2026060851
and 15 more
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498		 CWE-200 Low
No
No
 2.3.1.0 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 27 more
#VU131183 - Resource exhaustion
CVE-2026-41284		 CWE-400 Medium
No
No
 2.3.1.0 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 24 more
#VU128227 - Improper Access Control
CVE-2026-22753		 CWE-284 Medium
No
No
 2.3.1.0 27.04.2026 SB20260427181
SB2026062910
#VU128226 - Improper Access Control
CVE-2026-22754		 CWE-284 Medium
No
No
 2.3.1.0 27.04.2026 SB20260427181
SB2026062910
#VU125804 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-2950		 CWE-1321 Medium
No
No
 2.3.0.1 10.04.2026 SB2026041094
SB2026042049
SB2026042720
and 17 more
#VU125803 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-4800		 CWE-94 High
No
No
 2.3.0.1 10.04.2026 SB2026041094
SB20260410101
SB20260410102
and 66 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483		 CWE-116 Medium
No
No
 2.3.0.1 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 22 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880		 CWE-444 Medium
No
No
 2.3.0.1 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 20 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145		 CWE-295 Low
No
No
 2.3.0.1 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 19 more
#VU125742 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-25854		 CWE-601 Low
No
No
 2.3.0.1 09.04.2026 SB20260409109
SB2026041565
SB20260417131
and 16 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146		 CWE-327 Medium
No
No
 2.3.0.1 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 29 more
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 2.3.0.1 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 27 more
#VU122997 - Protection Mechanism Failure
CVE-2026-24733		 CWE-693 Low
No
No
 2.3.0.1 17.02.2026 SB2026021765
SB2026031245
SB2026031361
and 11 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 2.3.0.1 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 72 more
#VU117297 - Command injection
CVE-2025-59419		 CWE-77 Medium
No
No
 2.3.1.0 15.10.2025 SB20251015146
SB2025102483
SB2025102484
and 14 more
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 2.3.1.0 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU111210 - Improper input validation
CVE-2025-41234		 CWE-20 Medium
No
No
 2.3.1.0 17.06.2025 SB2025061720
SB2025070709
SB2025071012
and 13 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 2.3.0.1 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 62 more


Showing elements 1 - 20 out of 55