IBM Storage Scale System

Name: IBM Storage Scale System
Brand: IBM

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

1critical338high1030medium11low

updated 2026-10-28

vulnerabilities (1,665)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-36971US	high7.8OT critical	2.70% (86th)	KEV	6.1.9.7	2024-06-10	2 versions
CVE-2023-47108US	high7.5	2.03% (81st)	Exploit	6.1.9.7	2023-11-10	2 versions
CVE-2024-36886US	high7.8	1.31% (70th)	Exploit	6.1.9.7	2024-05-30	2 versions
CVE-2024-26594US	high7.1	51.2% (99th)	—	6.1.9.7	2024-02-23	2 versions
CVE-2023-52755US	—	28.1% (98th)	—	6.1.9.7	2024-05-21	4 versions
CVE-2024-6409US	—	27.9% (98th)	—	6.2.3.0	2024-07-08	2 versions
CVE-2024-2201US	—	8.79% (95th)	—	6.2.3.0	2024-12-19	2 versions
CVE-2018-15209US	high8.8	3.92% (90th)	—	6.1.9.7	2018-08-08	2 versions
CVE-2024-27053US	—	1.65% (76th)	—	6.1.9.7	2024-05-01	5 versions
CVE-2023-45142US	high7.5	1.61% (76th)	—	6.1.9.7	2023-10-12	2 versions
CVE-2024-35960US	—	1.41% (73rd)	—	6.1.9.8	2024-05-20	4 versions
CVE-2021-47548US	—	1.36% (72nd)	—	6.1.9.7	2024-05-24	2 versions
CVE-2024-27405US	—OT elevated	1.30% (70th)	—	6.2.3.1	2024-05-17	4 versions
CVE-2023-52832US	—OT elevated	1.26% (70th)	—	6.1.9.8	2024-05-21	4 versions
CVE-2023-52735US	—	1.22% (68th)	—	6.1.9.7	2024-05-21	4 versions
CVE-2024-35955US	—	1.18% (67th)	—	6.1.9.7	2024-05-20	4 versions
CVE-2024-27028US	—	1.18% (67th)	—	6.2.3.0	2024-05-01	5 versions
CVE-2024-35845US	—	1.17% (67th)	—	6.2.3.1	2024-05-17	4 versions
CVE-2024-21217US	—	1.15% (67th)	—	6.1.9.6	2024-10-15	2 versions
CVE-2023-42950US	high8.8	1.07% (65th)	—	6.2.2.1	2024-03-28	2 versions
CVE-2023-52798US	—	1.03% (63rd)	—	6.1.9.7	2024-05-21	4 versions
CVE-2024-26621US	medium5.5	1.01% (63rd)	—	6.2.3.1	2024-03-02	2 versions
CVE-2024-21208US	—	1.01% (63rd)	—	6.1.9.6	2024-10-15	2 versions
CVE-2024-24788US	—	1.00% (63rd)	—	6.1.9.7	2024-05-08	2 versions
CVE-2024-41040US	high7.0	1.00% (63rd)	—	6.1.9.7	2024-07-29	2 versions
CVE-2024-35857US	—	0.98% (62nd)	—	6.2.3.1	2024-05-17	4 versions
CVE-2023-52699US	—	0.97% (62nd)	—	6.2.3.1	2024-05-19	4 versions
CVE-2024-36912US	—	0.97% (62nd)	—	6.1.9.7	2024-05-30	2 versions
CVE-2024-27388US	medium5.5	0.96% (61st)	—	6.1.9.8	2024-05-01	5 versions
CVE-2024-21235US	—	0.93% (60th)	—	6.2.2.1	2024-10-15	2 versions
CVE-2024-36896US	—	0.92% (60th)	—	6.2.3.0	2024-05-30	2 versions
CVE-2022-48747US	—	0.92% (60th)	—	6.2.3.0	2024-06-20	2 versions
CVE-2024-35823US	—	0.92% (60th)	—	6.2.3.0	2024-05-17	4 versions
CVE-2021-47075US	—	0.91% (60th)	—	6.1.9.8	2024-03-01	2 versions
CVE-2024-36929US	medium5.5	0.90% (60th)	—	6.2.3.0	2024-05-30	2 versions
CVE-2024-40983US	medium5.5	0.88% (59th)	—	6.1.9.6	2024-07-12	2 versions
CVE-2024-41081US	medium5.5	0.87% (59th)	—	6.2.3.0	2024-07-29	2 versions
CVE-2024-42145US	medium5.5	0.87% (59th)	—	6.1.9.7	2024-07-30	2 versions
CVE-2023-52776US	—	0.86% (58th)	—	6.1.9.8	2024-05-21	4 versions
CVE-2024-26690US	—	0.84% (58th)	—	6.2.3.0	2024-04-03	2 versions
CVE-2024-26901US	medium5.5	0.83% (57th)	—	6.2.2.1	2024-04-17	4 versions
CVE-2024-26731US	—	0.83% (57th)	—	6.1.9.7	2024-04-03	2 versions
CVE-2023-52696US	—	0.82% (57th)	—	6.1.9.7	2024-05-17	4 versions
CVE-2024-21210US	—	0.81% (57th)	—	6.1.9.6	2024-10-15	2 versions
CVE-2024-41048US	medium5.5	0.80% (56th)	—	6.2.3.0	2024-07-29	2 versions
CVE-2023-52738US	—	0.80% (56th)	—	6.2.3.1	2024-05-21	4 versions
CVE-2024-35878US	—	0.79% (56th)	—	6.2.3.1	2024-05-19	4 versions
CVE-2024-40923US	medium5.5	0.79% (56th)	—	6.2.2.1	2024-07-12	2 versions
CVE-2024-41007US	low3.3	0.77% (56th)	—	6.1.9.6	2024-07-15	2 versions
CVE-2021-47064US	—	0.77% (55th)	—	6.1.9.8	2024-02-29	4 versions

showing 50 of 1,665

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference336 CVEs
CWE-20Improper Input Validation222 CVEs
CWE-416Use After Free197 CVEs
CWE-667Improper Locking159 CVEs
CWE-401Missing Release of Memory after Effective Lifetime149 CVEs
CWE-125Out-of-bounds Read104 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')98 CVEs
CWE-787Out-of-bounds Write94 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)1,665 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan