Known vulnerabilities in Storage Scale

Vendor: IBM Corporation
Software: Storage Scale
Software CPE: cpe:2.3:a:ibm_corporation:storage_scale:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 29
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Scale Storage Scale is affected by 29 known vulnerabilities: 2 high, 19 medium, 8 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123597 - Use of a Cryptographic Primitive with a Risky Implementation
CVE-2025-14505		 CWE-1240 Medium
No
No
 5.2.3.7, 6.0.0.2 06.03.2026 SB2026030609
SB2026030633
SB2026040323
and 1 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 5.2.3.7, 6.0.0.2 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 65 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 5.2.3.7, 6.0.0.2 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 5.2.3.7, 6.0.0.2 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU115828 - Resource exhaustion
CVE-2025-6493		 CWE-400 Medium
No
No
 5.2.3.5 18.09.2025 SB20250918111
SB20250918112
SB2025112530
and 8 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 5.2.3.5 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 5.2.3.5 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU112889 - Insecure inherited permissions
CVE-2025-36104		 CWE-277 Medium
No
No
 5.2.3.2 15.07.2025 SB2025071510
#VU112166 - Improper Authentication
CVE-2025-49146		 CWE-287 High
No
No
 5.1.9.11, 5.2.3.3, 6.2.3.2 04.07.2025 SB2025070405
SB2025070406
SB2025070708
and 13 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 5.1.9.12, 5.2.1.0 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 5.2.3.3 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU99563 - Improper Verification of Cryptographic Signature
CVE-2024-48948		 CWE-347 Low
No
No
 5.2.3.7, 6.0.0.2 31.10.2024 SB2024103162
SB2024103166
SB2024110115
and 18 more
#VU98513 - Improper input validation
CVE-2024-48949		 CWE-20 Medium
No
No
 5.2.3.7, 6.0.0.2 14.10.2024 SB2024101490
SB20241014105
SB20241014106
and 25 more
#VU97606 - Improper Verification of Cryptographic Signature
CVE-2024-42459		 CWE-347 Medium
No
No
 5.2.3.7, 6.0.0.2 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 23 more
#VU97605 - Improper Verification of Cryptographic Signature
CVE-2024-42460		 CWE-347 Medium
No
No
 5.2.3.7, 6.0.0.2 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU97604 - Improper Verification of Cryptographic Signature
CVE-2024-42461		 CWE-347 Medium
No
No
 5.2.3.7, 6.0.0.2 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU81875 - Improper Authorization
CVE-2023-3961		 CWE-285 High
No
No
 5.1.9.2 11.10.2023 SB2023101133
SB2023101137
SB2023101155
and 28 more
#VU81867 - Resource Management Errors
CVE-2023-42670		 CWE-399 Medium
No
No
 5.1.9.2 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 16 more
#VU63701 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-28498		 CWE-327 Low
No
No
 5.2.3.7, 6.0.0.2 26.05.2022 SB2021020223
SB2022052615
SB2023091411
and 2 more
#VU60621 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23445		 CWE-79 Low
No
No
 5.2.3.3 15.02.2022 SB2021092717
SB2022021511
SB2022080802
and 11 more


Showing elements 1 - 20 out of 29