Known vulnerabilities in Storage Protect Plus Server

Vendor: IBM Corporation
Software: Storage Protect Plus Server
Software CPE: cpe:2.3:a:ibm_corporation:storage_protect_plus_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 315
Public exploits: 23
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Protect Plus Server Storage Protect Plus Server is affected by 315 known vulnerabilities: 1 critical, 10 high, 77 medium, 227 low Critical High Medium Low

Vulnerabilities (315)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124872 - Use of Cache Containing Sensitive Information
CVE-2026-27205		 CWE-524 Medium
No
No
 10.1.18 06.04.2026 SB2026040613
SB2026040615
SB2026040617
and 14 more
#VU123583 - Improper Handling of Windows Device Names
CVE-2026-21860		 CWE-67 Low
No
No
 10.1.18 05.03.2026 SB2026030562
SB2026030633
SB2026030937
and 6 more
#VU123124 - Improper Handling of Windows Device Names
CVE-2026-27199		 CWE-67 Medium
No
No
 10.1.18 23.02.2026 SB2026022322
SB2026030633
SB2026040615
and 10 more
#VU120254 - Improper Handling of Length Parameter Inconsistency
CVE-2025-14847		 CWE-130 High
Available
Exploited
 10.1.18 23.12.2025 SB2025122318
SB2026011607
SB2026012973
and 9 more
#VU117682 - Resource exhaustion
CVE-2025-61795		 CWE-400 Medium
No
No
 10.1.18 27.10.2025 SB2025102749
SB20251031122
SB20251031123
and 39 more
#VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55752		 CWE-22 High
Available
No
 10.1.18 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 43 more
#VU117680 - Improper Output Neutralization for Logs
CVE-2025-55754		 CWE-117 Low
No
No
 10.1.18 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 27 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 10.1.18 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337		 CWE-264 High
No
No
 10.1.18 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379		 CWE-264 Medium
Available
No
 10.1.18 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU98510 - Out-of-bounds read
CVE-2024-5629		 CWE-125 Medium
No
No
 10.1.18 14.10.2024 SB2024101477
SB2024101478
SB2024101488
and 6 more
#VU97652 - Resource exhaustion
CVE-2024-38286		 CWE-400 Medium
No
No
 10.1.18 23.09.2024 SB2024092355
SB2024100267
SB2024102808
and 26 more
#VU97554 - Integer underflow
CVE-2024-46759		 CWE-191 Low
No
No
 10.1.18 18.09.2024 SB20240918113
SB2024092774
SB2024092777
and 41 more
#VU96533 - NULL Pointer Dereference
CVE-2024-43898		 CWE-476 Low
No
No
 10.1.18 26.08.2024 SB2024082661
SB2024090668
SB2024090669
and 16 more
#VU96151 - Improper Locking
CVE-2024-42294		 CWE-667 Low
No
No
 10.1.18 19.08.2024 SB2024081992
SB2024091406
SB2024100877
and 13 more
#VU96127 - NULL Pointer Dereference
CVE-2024-43823		 CWE-476 Low
No
No
 10.1.18 19.08.2024 SB2024081968
SB2024091077
SB2024091080
and 15 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-5569		 CWE-835 Medium
No
No
 10.1.18 26.07.2024 SB2024072688
SB2024072690
SB2024072692
and 59 more
#VU90850 - Improper input validation
CVE-2024-36880		 CWE-20 Low
No
No
 10.1.18 03.06.2024 SB20240603123
SB2024070893
SB2024070894
and 25 more
#VU89672 - Use After Free
CVE-2024-27398		 CWE-416 Medium
Available
No
 10.1.18 20.05.2024 SB2024052062
SB2024052087
SB2024052088
and 185 more
#VU88828 - Resource exhaustion
CVE-2024-3651		 CWE-400 Medium
No
No
 10.1.18 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more


Showing elements 1 - 20 out of 315