| CVE-2025-64650 |
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files
|
6.5
Medium
|
Dec 8, 2025 |
| CVE-2024-22314 |
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that…
|
5.9
Medium
|
Apr 16, 2025 |
| CVE-2024-38325 |
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain…
|
5.9
Medium
|
Jan 27, 2025 |
| CVE-2024-52361 |
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be…
|
5.7
Medium
|
Dec 18, 2024 |
| CVE-2023-50956 |
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly…
|
4.4
Medium
|
Dec 18, 2024 |
| CVE-2024-47119 |
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow…
|
5.9
Medium
|
Dec 18, 2024 |
| CVE-2024-38324 |
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during…
|
5.9
Medium
|
Sep 24, 2024 |
| CVE-2024-38322 |
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 agent username and password error response discrepancy…
|
5.3
Medium
|
Jun 28, 2024 |
| CVE-2024-25031 |
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could…
|
6.5
Medium
|
Jun 28, 2024 |
| CVE-2024-22313 |
IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic…
|
6.2
Medium
|
Feb 10, 2024 |
| CVE-2024-22312 |
IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local…
|
4.4
Medium
|
Feb 10, 2024 |
| CVE-2023-50957 |
IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after…
|
8.0
High
|
Feb 10, 2024 |