Known vulnerabilities in Storage Fusion Data Foundation 4.11z0-z12

Vendor: IBM Corporation
Software: Storage Fusion Data Foundation
Version: 4.11z0-z12
Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion_data_foundation:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 20
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Storage Fusion Data Foundation version 4.11z0-z12 Storage Fusion Data Foundation 4.11z0-z12 is affected by 20 vulnerabilities: 2 high, 15 medium, 3 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85833 - Resource exhaustion
CVE-2023-46159		 CWE-400 Low
No
No
 - 26.01.2024 SB2024012623
SB2024020929
SB2024110890
and 4 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 4.16z2 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 4.14 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more
#VU77145 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2121		 CWE-79 Low
No
No
 4.14 12.06.2023 SB2023061203
SB2023112450
SB2025040717
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 4.13 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU68839 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-30580		 CWE-94 Low
No
No
 4.13 31.10.2022 SB2022103122
SB2023022738
SB2023033008
and 22 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 4.13 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 4.13 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 4.13 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 4.13 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Public exploit available
No
 4.13 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629		 CWE-330 Medium
No
No
 4.12 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 4.13 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66070 - Resource exhaustion
CVE-2022-30633		 CWE-400 Medium
No
No
 4.13 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 4.13 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 4.13 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66067 - Resource exhaustion
CVE-2022-30632		 CWE-400 Medium
No
No
 4.12 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66063 - Resource exhaustion
CVE-2022-30630		 CWE-400 Medium
No
No
 4.12 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66062 - Resource exhaustion
CVE-2022-30631		 CWE-400 Medium
No
No
 4.12 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more