IBM Storwize V5100
productDEcpe:/a:ibm:storwize:v5100
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
0
critical
by severity
0critical1high1medium0low
updated 2026-10-29
01
vulnerabilities (13)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2024-0760US | — | Exploit | ||||
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack c… | ||||||
| CVE-2024-1975US | — | — | ||||
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resol… | ||||||
| CVE-2024-1737US | — | — | ||||
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being… | ||||||
| CVE-2024-4076US | — | — | ||||
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure.
This issue affects BIND 9 versions… | ||||||
| CVE-2024-21217US | — | — | ||||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are af… | ||||||
| CVE-2023-42950US | high8.8 | — | ||||
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Proc… | ||||||
| CVE-2024-21208US | — | — | ||||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affec… | ||||||
| CVE-2024-21235US | — | — | ||||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected… | ||||||
| CVE-2024-21210US | — | — | ||||
Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to ex… | ||||||
| CVE-2024-21211US | — | — | ||||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affecte… | ||||||
| CVE-2023-27870US | — | — | ||||
IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IBM X-Force ID: 249518.… | ||||||
| CVE-2023-25681US | medium6.5 | — | ||||
LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. T… | ||||||
| CVE-2025-36120US | —OT elevated | — | ||||
IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resou… | ||||||
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-203Observable Discrepancy3 CVEs
- CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
- CWE-404Improper Resource Shutdown or Release2 CVEs
- CWE-130Improper Handling of Length Parameter Inconsistency1 CVEs
- CWE-190Integer Overflow or Wraparound1 CVEs
- CWE-195Signed to Unsigned Conversion Error1 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
- CWE-308Use of Single-factor Authentication1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)13 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan