7.5
High
CVE-2025-36118 IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive…
Description
IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Storage Virtualize | 9.1 | No fix stated |
| Storage Virtualize | 8.7 | No fix stated |
| Storage Virtualize | 8.5 | No fix stated |
| Storage Virtualize | 8.4 | No fix stated |
Other CVEs of Storage Virtualize
The 8 CVEs of Storage Virtualize →
CVE-2025-36120
IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH…
8.8
High
CVE-2025-1351
IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another…
6.7
Medium
CVE-2025-0160
IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through…
8.1
High
CVE-2025-0159
IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through…
9.1
Critical