Known vulnerabilities in Storage Virtualize - page 4

Vendor: IBM Corporation
Software: Storage Virtualize
Software CPE: cpe:2.3:a:ibm_corporation:storage_virtualize:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 162
Public exploits: 23
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Virtualize Storage Virtualize is affected by 162 known vulnerabilities: 56 high, 78 medium, 28 low Critical High Medium Low

Vulnerabilities (162)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85848 - Resource exhaustion
CVE-2023-6481		 CWE-400 Medium
No
No
 8.6.3.0, 8.7.0.0 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more
#VU54852 - Resource exhaustion
CVE-2021-35517		 CWE-400 Medium
No
No
 8.6.3.0, 8.7.0.0 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 8.6.3.0, 8.7.0.0 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU49377 - Deserialization of Untrusted Data
CVE-2020-36189		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 8.6.3.0, 8.7.0.0 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU29129 - Deserialization of Untrusted Data
CVE-2020-14060		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 18.06.2020 SB2020061806
SB2020070320
SB2020073033
and 15 more
#VU27031 - Deserialization of Untrusted Data
CVE-2020-11619		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 20.04.2020 SB2020030909
SB2020052628
SB2020073033
and 15 more
#VU26494 - Deserialization of Untrusted Data
CVE-2020-10673		 CWE-502 High
Available
No
 8.6.3.0, 8.7.0.0 01.04.2020 SB2020030909
SB2020073033
SB2022060909
and 17 more
#VU21750 - Improper input validation
CVE-2019-17531		 CWE-20 Medium
No
No
 8.6.3.0, 8.7.0.0 13.10.2019 SB2019100711
SB2019120206
SB2019121120
and 24 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 8.6.3.0, 8.7.0.0 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU21580 - Improper input validation
CVE-2019-16942		 CWE-20 Medium
No
No
 8.6.3.0, 8.7.0.0 07.10.2019 SB2019100711
SB2019100716
SB2019111903
and 23 more
#VU21470 - Improper input validation
CVE-2019-10202		 CWE-20 High
No
No
 8.6.3.0, 8.7.0.0 01.10.2019 SB2019100116
SB2019100117
SB2019100118
and 24 more
#VU19943 - Deserialization of Untrusted Data
CVE-2018-12023		 CWE-502 Medium
No
No
 8.6.3.0, 8.7.0.0 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 20 more
#VU19938 - Deserialization of Untrusted Data
CVE-2018-11307		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 17 more
#VU19937 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14439		 CWE-200 Medium
No
No
 8.6.3.0, 8.7.0.0 06.08.2019 SB2019073015
SB2019100716
SB2019102422
and 16 more
#VU18961 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12814		 CWE-200 Medium
No
No
 8.6.3.0, 8.7.0.0 02.07.2019 SB2019062606
SB2019092703
SB2019100116
and 25 more
#VU17779 - Improper input validation
CVE-2018-19361		 CWE-20 High
No
No
 8.6.3.0, 8.7.0.0 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 23 more
#VU17776 - Server-Side Request Forgery (SSRF)
CVE-2018-14721		 CWE-918 Low
No
No
 8.6.3.0, 8.7.0.0 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 23 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 8.6.3.0, 8.7.0.0 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more
#VU10257 - Deserialization of Untrusted Data
CVE-2017-17485		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 26.01.2018 SB2017121218
SB2018021605
SB2018051725
and 24 more


Showing elements 61 - 80 out of 162