Known vulnerabilities in Storage Defender Copy Data Management

Vendor: IBM Corporation
Software: Storage Defender Copy Data Management
Software CPE: cpe:2.3:a:ibm_corporation:storage_defender_copy_data_management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 55
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Defender Copy Data Management Storage Defender Copy Data Management is affected by 55 known vulnerabilities: 13 high, 32 medium, 10 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132377 - Always-Incorrect Control Flow Implementation
CVE-2026-41988		 CWE-670 Low
No
No
 2.3.1.0 27.05.2026 SB2026052767
SB2026052768
SB20260528259
and 8 more
#VU131177 - Improper Access Control
CVE-2026-43515		 CWE-284 Medium
Available
No
 2.3.1.0 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 20 more
#VU131178 - Information Exposure Through Timing Discrepancy
CVE-2026-43514		 CWE-208 Low
No
No
 2.3.1.0 12.05.2026 SB2026051281
SB2026051592
SB2026060851
and 11 more
#VU131179 - Improper Handling of Case Sensitivity
CVE-2026-43513		 CWE-178 Medium
No
No
 2.3.1.0 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 18 more
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498		 CWE-200 Low
No
No
 2.3.1.0 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 16 more
#VU131182 - Improper input validation
CVE-2026-41293		 CWE-20 Medium
No
No
 2.3.1.0 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 20 more
#VU131183 - Resource exhaustion
CVE-2026-41284		 CWE-400 Medium
No
No
 2.3.1.0 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 19 more
#VU128406 - Deserialization of Untrusted Data
CVE-2026-41409		 CWE-502 High
No
No
 2.3.1.0 28.04.2026 SB20260428219
SB2026050317
SB2026050318
and 2 more
#VU128405 - Improper Access Control
CVE-2026-41635		 CWE-284 High
No
No
 2.3.1.0 28.04.2026 SB20260428219
SB2026050317
SB2026050318
and 2 more
#VU128227 - Improper Access Control
CVE-2026-22753		 CWE-284 Medium
No
No
 2.3.1.0 27.04.2026 SB20260427181
SB2026062910
#VU128226 - Improper Access Control
CVE-2026-22754		 CWE-284 Medium
No
No
 2.3.1.0 27.04.2026 SB20260427181
SB2026062910
#VU124844 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-33939		 CWE-754 Medium
No
No
 2.3.1.0 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 5 more
#VU124843 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33941		 CWE-94 High
No
No
 2.3.1.0 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 5 more
#VU124841 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33938		 CWE-94 High
No
No
 2.3.1.0 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 5 more
#VU124840 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33940		 CWE-94 High
No
No
 2.3.1.0 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 5 more
#VU117297 - Command injection
CVE-2025-59419		 CWE-77 Medium
No
No
 2.3.1.0 15.10.2025 SB20251015146
SB2025102483
SB2025102484
and 14 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 2.3.1.0 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 2.3.1.0 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU111210 - Improper input validation
CVE-2025-41234		 CWE-20 Medium
No
No
 2.3.1.0 17.06.2025 SB2025061720
SB2025070709
SB2025071012
and 13 more
#VU101974 - Deserialization of Untrusted Data
CVE-2024-52046		 CWE-502 High
No
No
 2.3.1.0 28.12.2024 SB2024122801
SB20250117140
SB2025020549
and 21 more


Showing elements 1 - 20 out of 55