Known vulnerabilities in Storage Protect for Virtual Environments: Data Protection for VMware

Vendor: IBM Corporation
Software: Storage Protect for Virtual Environments: Data Protection for VMware
Software CPE: cpe:2.3:a:ibm_corporation:storage_protect_for_virtual_environments_data_protection_for_vmware:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 125
Public exploits: 5
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Protect for Virtual Environments: Data Protection for VMware Storage Protect for Virtual Environments: Data Protection for VMware is affected by 125 known vulnerabilities: 13 high, 69 medium, 43 low Critical High Medium Low

Vulnerabilities (125)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132041 - Resource exhaustion
CVE-2026-4410		 CWE-400 Low
No
No
 8.2.2.0 21.05.2026 SB2026052124
SB2026060911
SB2026060912
and 12 more
#VU132031 - Security Features
CVE-2026-5516		 CWE-254 Low
No
No
 8.2.2.0 21.05.2026 SB2026052115
SB20260626104
SB2026071327
and 13 more
#VU128402 - Improper Encoding or Escaping of Output
CVE-2026-34480		 CWE-116 Medium
No
No
 8.2.2.0 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 22 more
#VU128401 - Improper Encoding or Escaping of Output
CVE-2026-34479		 CWE-116 Medium
No
No
 8.2.2.0 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 20 more
#VU128400 - Improper Output Neutralization for Logs
CVE-2026-34478		 CWE-117 Medium
No
No
 8.2.2.0 28.04.2026 SB20260428217
SB2026052632
SB2026052731
and 19 more
#VU128399 - Improper Certificate Validation
CVE-2026-34477		 CWE-295 Medium
No
No
 8.2.2.0 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 22 more
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 8.2.2.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 80 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 8.2.2.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 82 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 8.2.2.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 79 more
#VU126764 - Improper input validation
CVE-2026-22018		 CWE-20 Low
No
No
 8.2.2.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 79 more
#VU124875 - Use of Hard-coded Cryptographic Key
CVE-2025-14923		 CWE-321 Low
No
No
 8.2.2.0 06.04.2026 SB2026040626
SB2026040627
SB2026041006
and 18 more
#VU124833 - Server-Side Request Forgery (SSRF)
CVE-2026-1561		 CWE-918 Low
No
No
 8.2.2.0 02.04.2026 SB2026040252
SB2026040325
SB2026040331
and 14 more
#VU124831 - Weak Password Requirements
CVE-2025-14917		 CWE-521 Low
No
No
 8.2.2.0 02.04.2026 SB2026040252
SB2026040327
SB2026040328
and 19 more
#VU124829 - Exposure of sensitive information to an unauthorized actor
CVE-2025-14915		 CWE-200 Low
No
No
 8.2.2.0 02.04.2026 SB2026040252
SB2026040326
SB2026040329
and 15 more
#VU124825 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-29063		 CWE-1321 Medium
No
No
 8.2.2.0 02.04.2026 SB2026040246
SB2026040612
SB2026040627
and 36 more
#VU123913 - Improper Access Control
CVE-2024-29371		 CWE-284 Medium
No
No
 8.2.2.0 12.03.2026 SB2026031212
SB2026031213
SB2026031310
and 29 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14914		 CWE-22 Low
No
No
 8.2.2.0 12.02.2026 SB2026021209
SB2026021210
SB2026021212
and 23 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 8.2.2.0 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 8.2.2.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 8.2.2.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 103 more


Showing elements 1 - 20 out of 125