8.1
Élevée
CVE-2025-0160 IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through…
Description
IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.1) could allow a remote attacker with access to the system to execute arbitrary Java code due to improper restrictions in the RPCAdapter service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Storage Virtualize 8.7 | 8.7.1.0 → 8.7.2.1 | Pas de correctif indiqué |
| Storage Virtualize 8.6 | 8.6.0.0 → 8.6.3.0 | Pas de correctif indiqué |
| Storage Virtualize 8.5 | 8.5.0.0 → 8.5.4.0 | Pas de correctif indiqué |
Autres CVE de Storage Virtualize
Les 8 CVE de Storage Virtualize →
CVE-2025-36118
IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive…
7.5
Élevée
CVE-2025-36120
IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH…
8.8
Élevée
CVE-2025-1351
IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another…
6.7
Moyenne
CVE-2025-0159
IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through…
9.1
Critique