Known vulnerabilities in Storage Protect Server

Vendor: IBM Corporation
Software: Storage Protect Server
Software CPE: cpe:2.3:a:ibm_corporation:storage_protect_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 229
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Protect Server Storage Protect Server is affected by 229 known vulnerabilities: 24 high, 144 medium, 61 low Critical High Medium Low

Vulnerabilities (229)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130216 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-41417		 CWE-93 Medium
No
No
 8.2.2 05.05.2026 SB20260505124
SB2026051351
SB2026051901
and 8 more
#VU130215 - Resource exhaustion
CVE-2026-42587		 CWE-400 Medium
No
No
 8.2.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 15 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42581		 CWE-444 Medium
No
No
 8.2.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 14 more
#VU130211 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42580		 CWE-444 Medium
No
No
 8.2.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 7 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585		 CWE-444 Medium
No
No
 8.2.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 14 more
#VU130206 - Allocation of Resources Without Limits or Throttling
CVE-2026-42583		 CWE-770 Medium
No
No
 8.2.2 05.05.2026 SB20260505124
SB2026052039
SB20260528254
and 12 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584		 CWE-444 Medium
No
No
 8.2.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 14 more
#VU125816 - Sensitive Information in Resource Not Removed Before Reuse
CVE-2026-5795		 CWE-226 High
No
No
 8.2.2 11.04.2026 SB2026041112
SB20260507308
SB2026052932
and 5 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871		 CWE-770 Medium
No
No
 8.2.2 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 15 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 8.2.2 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more
#VU123671 - Improper input validation
CVE-2026-1225		 CWE-20 Low
No
No
 8.2.1 10.03.2026 SB2026031035
SB2026031036
SB2026031041
and 6 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 8.2.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 8.2.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 8.2.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 8.2.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU121703 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-12383		 CWE-362 Medium
No
No
 8.2.2 20.01.2026 SB2026012071
SB2026012079
SB20260120119
and 17 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 8.2.2 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009		 CWE-404 Medium
No
No
 8.2.1 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU98517 - Resource exhaustion
CVE-2024-8184		 CWE-400 Medium
No
No
 8.2.1 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 8.2.1 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more


Showing elements 1 - 20 out of 229