Read the docs

Ironmountain

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ironmountain records in CISA KEV

No Ironmountain vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Connected Backup 1 record MEDIUM Envision 1 record MEDIUM

Records

2 records

TI-2011-02093 CVE-2011-2397 · GHSA-9f7g-mcxq-q3vc

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to…

Priority MEDIUM 51

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05289 Published 2011-12-05 No fix listed CWE-20
TI-2025-08781 CVE-2025-9588 · GHSA-r4v7-wv7g-7qw4

OS Command Injection in Iron Mountain's enVision

Priority MEDIUM 45

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01136 Published 2025-09-23 Fixed in 250563 CWE-78
Open these records in search →