Product by IBM
Storage Scale
16 known vulnerabilities in Storage Scale (IBM), 1 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 158 other products | 7.5 | |
| Critical | CVE-2024-45337 | Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto | 9.1 | |
| High | CVE-2025-13465 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions | 5.3 | |
| Medium | CVE-2025-48924 | Apache Commons Lang: Uncontrolled Recursion | 5.3 | |
| High | CVE-2024-3651 | Denial of Service via Quadratic Complexity in kjd/idna | 6.2 | |
| High | CVE-2025-47913 | Potential denial of service in golang.org/x/crypto/ssh/agent | 7.5 | |
| High | CVE-2026-13460 | IBM Storage Scale: Use of Hard-coded Credentials | 7.5 | |
| High | CVE-2025-1948 | Eclipse Jetty HTTP clients can increase memory allocation | 7.5 | |
| High | CVE-2024-13009 | Eclipse Jetty GZIP buffer release | 7.2 | |
| High | CVE-2026-19483 | IBM Storage Scale: Insertion of Sensitive Information into Log File | 7.1 | |
| High | CVE-2025-1137 | IBM Storage Scale command injection | 7.5 | |
| High | CVE-2024-31892 | IBM Storage Scale SQL injection | 7.5 | |
| High | CVE-2025-14604 | IBM Storage Scale: Incorrect Permission Assignment for Critical Resource | 6.6 | |
| Medium | CVE-2025-36104 | IBM Storage Scale information disclosure | 6.5 | |
| High | CVE-2024-31891 | IBM Storage Scale privilege escalation | 7.8 | |
| High | CVE-2023-38002 | IBM Storage Scale session fixation | 5.0 |