Known vulnerabilities in Storage Protect Plus Container Agent

Vendor: IBM Corporation

Software: Storage Protect Plus Container Agent

Software CPE: cpe:2.3:a:ibm_corporation:storage_protect_plus_container_agent:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 64

Public exploits: 8

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (64)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-1135	CWE-444	Medium	No	No	10.1.12.7	06.05.2024	SB2024050631 SB2024050632 SB2024050633 and 40 more
#VU87201 - Improper input validation CVE-2024-24784	CWE-20	Medium	No	No	10.1.12.7	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-24785	CWE-79	Low	No	No	10.1.12.7	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor CVE-2023-45289	CWE-200	Low	No	No	10.1.12.7	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 54 more
#VU87197 - Resource exhaustion CVE-2023-45290	CWE-400	Medium	No	No	10.1.12.7	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 101 more
#VU87196 - Error Handling CVE-2024-24783	CWE-388	Medium	No	No	10.1.12.7	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 81 more
#VU86795 - Improper input validation CVE-2023-29483	CWE-20	Medium	No	No	10.1.12.7	26.02.2024	SB2024022638 SB2024040115 SB2024042448 and 37 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-51385	CWE-78	Medium	Available	No	10.1.12.7	26.12.2023	SB2023121905 SB2023122710 SB2023122801 and 65 more
#VU84537 - Inadequate Encryption Strength CVE-2023-48795	CWE-326	Low	Available	No	10.1.12.7	19.12.2023	SB2023121903 SB2023121905 SB2023121906 and 343 more
#VU83255 - Improper input validation CVE-2023-45283	CWE-20	Low	No	No	10.1.12.7	17.11.2023	SB2023111740 SB2023111741 SB2023111742 and 20 more
#VU82200 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2023-45145	CWE-362	Low	No	No	10.1.12.7	18.10.2023	SB2023101841 SB2023101848 SB2023101849 and 30 more
#VU80575 - Improper input validation CVE-2023-39322	CWE-20	Medium	No	No	10.1.12.7	08.09.2023	SB2023090845 SB2023091875 SB2023091876 and 51 more
#VU80574 - Improper input validation CVE-2023-39321	CWE-20	Medium	No	No	10.1.12.7	08.09.2023	SB2023090845 SB2023091875 SB2023091876 and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-39319	CWE-79	Medium	No	No	10.1.12.7	08.09.2023	SB2023090845 SB2023091146 SB2023091875 and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-39318	CWE-79	Medium	No	No	10.1.12.7	08.09.2023	SB2023090845 SB2023091146 SB2023091875 and 61 more
#VU80571 - Improper Control of Generation of Code ('Code Injection') CVE-2023-39320	CWE-94	Medium	No	No	10.1.12.7	08.09.2023	SB2023090845 SB2023091146 SB2023091875 and 15 more
#VU80228 - Cleartext Transmission of Sensitive Information CVE-2023-40217	CWE-319	Medium	No	No	10.1.12.7	01.09.2023	SB2023090142 SB2023090143 SB2023090144 and 139 more
#VU78913 - Improper Certificate Validation CVE-2023-29409	CWE-295	Medium	No	No	10.1.12.7	03.08.2023	SB2023080320 SB2023080321 SB2023080370 and 98 more
#VU78506 - Heap-based Buffer Overflow CVE-2022-24834	CWE-122	Medium	Available	No	10.1.12.7	21.07.2023	SB2023072126 SB2023072127 SB2023072128 and 21 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2023-29406	CWE-644	Medium	No	No	10.1.12.7	17.07.2023	SB2023071737 SB2023071738 SB2023071739 and 94 more

Showing elements 1 - 20 out of 64

Known vulnerabilities in Storage Protect Plus Container Agent

Breakdown by Severity Chart

Vulnerabilities (64)

Please verify you're human