IBM Storage Scale

Name: IBM Storage Scale
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical195high517medium6low

updated 2026-10-28

vulnerabilities (853)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-23337US	high7.2	21.3% (98th)	Exploit	5.2.3.8	2021-02-15	2 versions
CVE-2025-43864US	—	20.5% (97th)	Exploit	5.2.3.1	2025-04-25	< 5.2.3.1
CVE-2020-7656US	medium6.1	6.43% (94th)	Exploit	5.2.0.0	2020-05-19	2 versions
CVE-2025-8671US	—	3.62% (89th)	Exploit	5.2.3.4	2025-08-13	< 5.2.3.4
CVE-2025-13465US	medium5.3	1.82% (79th)	Exploit	5.2.3.8	2026-01-21	2 versions
CVE-2026-33186US	—	1.58% (75th)	Exploit	5.2.3.8	2026-03-20	2 versions
CVE-2024-36886US	high7.8	1.31% (70th)	Exploit	6.2.2.0	2024-05-30	2 versions
CVE-2025-55163US	high7.5	1.10% (66th)	Exploit	5.2.3.4	2025-08-13	< 5.2.3.4
CVE-2025-43865US	—OT elevated	0.81% (57th)	Exploit	5.2.3.1	2025-04-25	< 5.2.3.1
CVE-2023-3640US	high7.8	0.76% (55th)	Exploit	6.2.2.0	2023-07-24	2 versions
CVE-2025-59057US	—	0.50% (43rd)	Exploit	5.2.3.7	2026-01-10	< 5.2.3.7
CVE-2024-6485US	—	0.49% (42nd)	Exploit	5.2.3.4	2024-07-11	< 5.2.3.4
CVE-2026-30951US	high7.5	0.45% (39th)	Exploit	6.0.1.0	2026-03-10	2 versions
CVE-2024-26594US	high7.1	51.2% (99th)	—	6.1.9.5	2024-02-23	2 versions
CVE-2020-28500US	medium5.3	7.34% (94th)	—	6.0.1.0	2021-02-15	2 versions
CVE-2024-10979US	high8.8	4.39% (91st)	—	6.2.2.0	2024-11-14	2 versions
CVE-2025-48989US	—	3.69% (90th)	—	5.2.3.4	2025-08-13	< 5.2.3.4
CVE-2025-5115US	high7.5	3.57% (89th)	—	5.2.3.4	2025-08-20	< 5.2.3.4
CVE-2023-6200US	high7.5	2.02% (81st)	—	6.1.9.5	2024-01-28	2 versions
CVE-2024-21138US	—	1.26% (69th)	—	6.2.2.0	2024-07-16	2 versions
CVE-2024-21217US	—	1.15% (67th)	—	5.2.2.1	2024-10-15	2 versions
CVE-2024-21147US	—	1.14% (66th)	—	6.1.9.5	2024-07-16	2 versions
CVE-2023-42950US	high8.8	1.07% (65th)	—	5.2.2.1	2024-03-28	2 versions
CVE-2024-21144US	low3.7	1.06% (64th)	—	6.2.2.0	2024-07-16	2 versions
CVE-2024-21131US	—	1.04% (64th)	—	6.2.2.0	2024-07-16	2 versions
CVE-2022-47951US	medium5.7	1.03% (64th)	—	V5.1.8	2023-01-26	2 versions
CVE-2024-26621US	medium5.5	1.01% (63rd)	—	6.1.9.5	2024-03-02	2 versions
CVE-2024-21208US	—	1.01% (63rd)	—	5.1.9.8	2024-10-15	2 versions
CVE-2022-47950US	medium6.5	1.01% (63rd)	—	V5.1.2.12	2023-01-18	2 versions
CVE-2024-38573US	—	1.00% (63rd)	—	6.1.9.5	2024-06-19	2 versions
CVE-2024-41040US	high7.0	1.00% (63rd)	—	6.1.9.5	2024-07-29	2 versions
CVE-2024-36912US	—	0.97% (62nd)	—	6.2.2.0	2024-05-30	2 versions
CVE-2024-21140US	—	0.94% (61st)	—	6.2.2.0	2024-07-16	2 versions
CVE-2026-26278US	—	0.94% (61st)	—	5.2.3.7	2026-02-19	< 5.2.3.7
CVE-2024-21235US	—	0.93% (60th)	—	5.1.9.8	2024-10-15	2 versions
CVE-2024-36896US	—	0.92% (60th)	—	6.1.9.5	2024-05-30	2 versions
CVE-2021-47075US	—	0.91% (60th)	—	6.1.9.5	2024-03-01	2 versions
CVE-2024-36929US	medium5.5	0.90% (60th)	—	6.2.2.0	2024-05-30	2 versions
CVE-2024-38541US	—	0.90% (60th)	—	6.2.2.0	2024-06-19	2 versions
CVE-2024-30171US	—	0.90% (60th)	—	5.1.9.5	2024-05-14	2 versions
CVE-2024-40983US	medium5.5	0.88% (59th)	—	6.2.2.0	2024-07-12	2 versions
CVE-2023-3312US	high7.5	0.88% (59th)	—	6.2.2.0	2023-06-19	2 versions
CVE-2024-41081US	medium5.5	0.87% (59th)	—	6.2.2.0	2024-07-29	2 versions
CVE-2024-42145US	medium5.5	0.87% (59th)	—	6.2.2.0	2024-07-30	2 versions
CVE-2024-21145US	medium4.8	0.86% (58th)	—	6.1.9.5	2024-07-16	2 versions
CVE-2024-38582US	—	0.86% (58th)	—	6.1.9.5	2024-06-19	2 versions
CVE-2024-38558US	medium5.5	0.82% (57th)	—	6.2.2.0	2024-06-19	2 versions
CVE-2024-38544US	medium6.3	0.81% (57th)	—	6.2.2.0	2024-06-19	2 versions
CVE-2024-21210US	—	0.81% (57th)	—	5.2.2.1	2024-10-15	2 versions
CVE-2024-24860US	medium5.3	0.80% (57th)	—	6.1.9.5	2024-02-05	2 versions

showing 50 of 853

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference160 CVEs
CWE-20Improper Input Validation144 CVEs
CWE-416Use After Free101 CVEs
CWE-667Improper Locking73 CVEs
CWE-401Missing Release of Memory after Effective Lifetime57 CVEs
CWE-125Out-of-bounds Read54 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')53 CVEs
CWE-787Out-of-bounds Write43 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)852 CVEs
EUEU Vulnerability Database (ENISA)8 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan