Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Ds8900f Firmware · all components

TI-2023-24804 CVE-2023-46172 · GHSA-637c-hjh6-3j32

IBM DS8900F security bypass

Priority MEDIUM 43

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow a remote attacker to bypass authentication restrictions for authorized user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00497 Published 2024-03-07 No fix listed CWE-287
TI-2025-24778 CVE-2025-36255 · GHSA-g2ch-h9hj-8fc4

DS8900F and DS8A00 Privilege Escalation

Priority MEDIUM 40

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with un…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00356 Published 2026-08-19 No fix listed CWE-267
TI-2025-24777 CVE-2025-36254 · GHSA-r4hf-3hxr-r742

DS8900F and DS8A00 Authentication Bypass

Priority LOW 33

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain s…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00462 Published 2026-08-19 No fix listed CWE-116
Priority LOW 30

IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8000 could allow a local user with authorized CCW update permissions to…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00115 Published 2025-12-26 No fix listed CWE-862
TI-2023-24802 CVE-2023-46170 · GHSA-q4mq-w4v3-mv77

IBM DS8900F information disclosure

Priority LOW 29

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily read files after enumerating file names.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00452 Published 2024-03-07 No fix listed CWE-204
TI-2023-24801 CVE-2023-46169 · GHSA-cjwm-hvhx-qxpm

IBM DS8900F file manipulation

Priority LOW 29

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily delete a file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00506 Published 2024-03-07 No fix listed CWE-41
TI-2024-14908 CVE-2024-22326 · GHSA-rq57-8pjv-c6r7

IBM System Storage improper authentication

Priority LOW 28

IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonym…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00394 Published 2024-06-06 No fix listed CWE-306
TI-2025-24827 CVE-2025-36398 · GHSA-8mjv-2344-rw9g

DS8900F and DS8A00 Information Disclosure

Priority LOW 24

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filen…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00257 Published 2026-08-19 No fix listed CWE-73
TI-2023-24803 CVE-2023-46171 · GHSA-2h4f-vpmv-8mr9

IBM DS8900F information disclosure

Priority LOW 20

IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to view sensitive log information after enumerating filenames.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00364 Published 2024-03-07 No fix listed CWE-532
Open these records in search →