Known vulnerabilities in Storage Virtualize - page 5

Vendor: IBM Corporation
Software: Storage Virtualize
Software CPE: cpe:2.3:a:ibm_corporation:storage_virtualize:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 162
Public exploits: 23
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Virtualize Storage Virtualize is affected by 162 known vulnerabilities: 56 high, 78 medium, 28 low Critical High Medium Low

Vulnerabilities (162)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69512 - Deserialization of Untrusted Data
CVE-2020-10650		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 23.11.2022 SB2020030909
SB2022112310
SB2023012310
and 12 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 8.6.3.0, 8.7.0.0 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 8.6.3.0, 8.7.0.0 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU60986 - Improper input validation
CVE-2020-28491		 CWE-20 Medium
No
No
 8.6.3.0, 8.7.0.0 03.03.2022 SB2022030316
SB2022030322
SB2022062413
and 12 more
#VU54854 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-35515		 CWE-835 Medium
No
No
 8.6.3.0, 8.7.0.0 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 23 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 8.6.3.0, 8.7.0.0 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54851 - Resource exhaustion
CVE-2021-35516		 CWE-400 Medium
No
No
 8.6.3.0, 8.7.0.0 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 21 more
#VU49374 - Deserialization of Untrusted Data
CVE-2020-36185		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU47105 - Deserialization of Untrusted Data
CVE-2020-24750		 CWE-502 High
Available
No
 8.6.3.0, 8.7.0.0 17.09.2020 SB2020092506
SB2020100512
SB2021012013
and 28 more
#VU29130 - Deserialization of Untrusted Data
CVE-2020-14062		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 18.06.2020 SB2020061806
SB2020070320
SB2020073033
and 14 more
#VU26492 - Deserialization of Untrusted Data
CVE-2020-10969		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 14 more
#VU26489 - Deserialization of Untrusted Data
CVE-2020-11112		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU25832 - Deserialization of Untrusted Data
CVE-2020-9548		 CWE-502 High
Available
No
 8.6.3.0, 8.7.0.0 09.03.2020 SB2020030909
SB2020073033
SB2022060909
and 14 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU25469 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8840		 CWE-94 Medium
Available
No
 8.6.3.0, 8.7.0.0 19.02.2020 SB2020021921
SB2020022615
SB2020061106
and 18 more
#VU17777 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-14720		 CWE-611 Low
No
No
 8.6.3.0, 8.7.0.0 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 21 more
#VU17053 - Permissions, Privileges, and Access Controls
CVE-2018-14718		 CWE-264 High
No
No
 8.6.3.0, 8.7.0.0 17.01.2019 SB2019011703
SB2019052407
SB2019091718
and 29 more
#VU14441 - Improper input validation
CVE-2018-11771		 CWE-20 Low
No
No
 8.6.3.0, 8.7.0.0 16.08.2018 SB2018081704
SB2020032701
SB2022072128
and 6 more
#VU10610 - Deserialization of Untrusted Data
CVE-2018-5968		 CWE-502 High
No
No
 8.6.3.0, 8.7.0.0 16.02.2018 SB2018021604
SB2018021605
SB2018051725
and 14 more
#VU9607 - Improper input validation
CVE-2017-15095		 CWE-20 High
No
No
 8.6.3.0, 8.7.0.0 08.12.2017 SB2017121101
SB2017111609
SB2018051424
and 28 more


Showing elements 81 - 100 out of 162