Known vulnerabilities in Storage Fusion Data Foundation 4.12z0-z13

Vendor: IBM Corporation
Software: Storage Fusion Data Foundation
Version: 4.12z0-z13
Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion_data_foundation:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 14
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Storage Fusion Data Foundation version 4.12z0-z13 Storage Fusion Data Foundation 4.12z0-z13 is affected by 14 vulnerabilities: 2 high, 10 medium, 2 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 4.14 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more
#VU77145 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2121		 CWE-79 Low
No
No
 4.14 12.06.2023 SB2023061203
SB2023112450
SB2025040717
#VU74186 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25000		 CWE-200 Medium
No
No
 4.13 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 4.13 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU68839 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-30580		 CWE-94 Low
No
No
 4.13 31.10.2022 SB2022103122
SB2023022738
SB2023033008
and 22 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 4.13 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 4.13 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 4.13 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 4.13 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Public exploit available
No
 4.13 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 4.13 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66070 - Resource exhaustion
CVE-2022-30633		 CWE-400 Medium
No
No
 4.13 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 4.13 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 4.13 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more