Known vulnerabilities in Storage Protect Operations Center

Vendor: IBM Corporation
Software: Storage Protect Operations Center
Software CPE: cpe:2.3:a:ibm_corporation:storage_protect_operations_center:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 67
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Protect Operations Center Storage Protect Operations Center is affected by 67 known vulnerabilities: 8 high, 35 medium, 24 low Critical High Medium Low

Vulnerabilities (67)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135090 - Improper Privilege Management
CVE-2026-3621		 CWE-269 Medium
No
No
 8.2.2 24.06.2026 SB2026062429
SB2026062430
SB20260626104
and 13 more
#VU132041 - Resource exhaustion
CVE-2026-4410		 CWE-400 Low
No
No
 8.2.2 21.05.2026 SB2026052124
SB2026060911
SB2026060912
and 11 more
#VU132031 - Security Features
CVE-2026-5516		 CWE-254 Low
No
No
 8.2.2 21.05.2026 SB2026052115
SB20260626104
SB2026071327
and 11 more
#VU124875 - Use of Hard-coded Cryptographic Key
CVE-2025-14923		 CWE-321 Low
No
No
 8.2.2 06.04.2026 SB2026040626
SB2026040627
SB2026041006
and 17 more
#VU124833 - Server-Side Request Forgery (SSRF)
CVE-2026-1561		 CWE-918 Low
No
No
 8.2.2 02.04.2026 SB2026040252
SB2026040325
SB2026040331
and 14 more
#VU124831 - Weak Password Requirements
CVE-2025-14917		 CWE-521 Low
No
No
 8.2.2 02.04.2026 SB2026040252
SB2026040327
SB2026040328
and 18 more
#VU124829 - Exposure of sensitive information to an unauthorized actor
CVE-2025-14915		 CWE-200 Low
No
No
 8.2.2 02.04.2026 SB2026040252
SB2026040326
SB2026040329
and 15 more
#VU124825 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-29063		 CWE-1321 Medium
No
No
 8.2.2 02.04.2026 SB2026040246
SB2026040612
SB2026040627
and 35 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14914		 CWE-22 Low
No
No
 8.2.1 12.02.2026 SB2026021209
SB2026021210
SB2026021212
and 23 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 8.2.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 8.2.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 8.2.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 8.2.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 8.2.1 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36000		 CWE-79 Low
No
No
 8.2.0 16.09.2025 SB20250916311
SB20250916316
SB2025092515
and 25 more
#VU112940 - Improper input validation
CVE-2025-30761		 CWE-20 Medium
No
No
 8.2.0 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 8.2.0 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 8.2.0 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 8.2.0 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 8.2.1 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more


Showing elements 1 - 20 out of 67