Known vulnerabilities in Storage Fusion Data Foundation 4.18.4

Known vulnerabilities in Storage Fusion Data Foundation 4.18.4

Vendor: IBM Corporation

Software: Storage Fusion Data Foundation

Version: 4.18.4

Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion_data_foundation:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 15

Public exploits: 2

Known exploited (KEV): 0

Vulnerabilities by Severity

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU146519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-42338	CWE-79	Medium	No	No	4.22	31.08.2026	SB20260831109 SB20260831117 SB20260831118 and 8 more
#VU143925 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-33672	CWE-1321	Medium	No	No	4.22	18.08.2026	SB2026081815 SB2026081816 SB2026081831 and 5 more
#VU139384 - Inefficient Regular Expression Complexity CVE-2026-33671	CWE-1333	Medium	No	No	4.22	26.07.2026	SB2026072609 SB2026072616 SB2026081816 and 6 more
#VU138768 - Allocation of Resources Without Limits or Throttling CVE-2026-35469	CWE-770	Low	No	No	4.22	20.07.2026	SB20260720353 SB20260720355 SB20260720356 and 45 more
#VU138390 - XML Injection CVE-2026-44665	CWE-91	Medium	No	No	4.22	20.07.2026	SB2026072008 SB2026101219
#VU132376 - Out-of-bounds write CVE-2026-41907	CWE-787	High	No	No	4.22	27.05.2026	SB2026052766 SB2026052768 SB2026060118 and 12 more
#VU131249 - Use of Uninitialized Resource CVE-2026-45736	CWE-908	Low	No	No	4.22	12.05.2026	SB20260512113 SB2026061995 SB2026062221 and 13 more
#VU131107 - Resource exhaustion CVE-2026-45149	CWE-400	Medium	No	No	4.22	12.05.2026	SB2026051222 SB2026061993 SB2026061994 and 3 more
#VU127462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-41305	CWE-79	Medium	No	No	4.22	24.04.2026	SB2026042418 SB2026050801 SB2026060217 and 5 more
#VU126615 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') CVE-2026-33036	CWE-776	Medium	No	No	4.22	20.04.2026	SB20260420117 SB2026052512 SB2026052624 and 3 more
#VU126614 - Improper input validation CVE-2026-27942	CWE-20	Low	No	No	4.22	20.04.2026	SB20260420116 SB2026052512 SB2026052624 and 3 more
#VU124772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-22029	CWE-79	Low	No	No	4.22	01.04.2026	SB2026040154 SB2026040164 SB2026041309 and 11 more
#VU123140 - Inefficient Regular Expression Complexity CVE-2026-26996	CWE-1333	Medium	No	No	4.22	23.02.2026	SB2026022345 SB2026030633 SB2026032328 and 37 more
#VU123126 - NULL Pointer Dereference CVE-2026-26278	CWE-476	Medium	Public exploit available	No	4.22	23.02.2026	SB2026022326 SB2026031935 SB2026040225 and 5 more
#VU122150 - Uncaught Exception CVE-2026-25128	CWE-248	Medium	Public exploit available	No	4.22	30.01.2026	SB2026013034 SB2026030312 SB2026030633 and 8 more