Known vulnerabilities in Storage Scale 5.2.3.8

Software: Storage Scale
Version: 5.2.3.8
Software CPE: cpe:2.3:a:ibm_corporation:storage_scale:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Storage Scale version 5.2.3.8 Storage Scale 5.2.3.8 is affected by 11 vulnerabilities: 11 medium Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137399 - Improper input validation
CVE-2026-6790
CWE-20 Medium
No
No
5.2.3.10, 6.0.1.1 13.07.2026 SB2026071349
SB2026091018
SB20260917198
and 3 more
#VU133456 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-50020
CWE-444 Medium
No
No
5.2.3.10, 6.0.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 10 more
#VU133450 - Uncontrolled Memory Allocation
CVE-2026-45416
CWE-789 Medium
No
No
5.2.3.10, 6.0.1.1 08.06.2026 SB2026060813
SB20260626101
SB2026070110
and 23 more
#VU133447 - Resource exhaustion
CVE-2026-46340
CWE-400 Medium
No
No
5.2.3.10, 6.0.1.1 08.06.2026 SB2026060813
SB2026070933
SB2026083158
and 4 more
#VU130216 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-41417
CWE-93 Medium
No
No
5.2.3.10, 6.0.1.1 05.05.2026 SB20260505124
SB2026051351
SB2026051901
and 11 more
#VU130215 - Resource exhaustion
CVE-2026-42587
CWE-400 Medium
No
No
5.2.3.10, 6.0.1.1 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 19 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42581
CWE-444 Medium
No
No
5.2.3.10, 6.0.1.1 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU130211 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42580
CWE-444 Medium
No
No
5.2.3.10, 6.0.1.1 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 10 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585
CWE-444 Medium
No
No
5.2.3.10, 6.0.1.1 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584
CWE-444 Medium
No
No
5.2.3.10, 6.0.1.1 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870
CWE-444 Medium
Public exploit available
No
5.2.3.10, 6.0.1.1 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 25 more