Flashsystem V9000 CVEs and Security Vulnerabilities

CVE-2017-1710

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531.

CVSS 3.0 · 9.8 Critical EPSS 3.5% KEV · Not listed

Vendors

Ibm

Products

Flashsystem V9000 Flashsystem V9000 Firmware San Volume Controller and 5 more

CVE-2015-7446

Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Ibm

Products

Flashsystem 9846-ac2 Flashsystem 9846-ae2 Flashsystem 9848-ac2 and 2 more

CVE-2020-4686

IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678.

CVSS 3.1 · 8.1 High EPSS 1.6% KEV · Not listed

Vendors

Ibm

Products

Flashsystem V5000 Flashsystem V5000 Firmware Flashsystem V7200 and 18 more

CVE-2018-1775

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Ibm

Products

Flashsystem V9000 Flashsystem V9100 San Volume Controller and 6 more

Search vulnerabilities