Product by IBM
IBM Storwize V7000 Firmware
14 known vulnerabilities in IBM Storwize V7000 Firmware (IBM), 3 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
3
Actively exploited (KEV)
1
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2017-5638 | Apache Struts Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 9 other products | 9.8 | |
| Critical | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEValso in 65 other products | 9.8 | |
| Critical | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEValso in 65 other products | 9.8 | |
| Critical | CVE-2017-1710 | IBM Storwize V7000 (2076): Privilege Escalation | 9.8 | |
| High | CVE-2018-1433 | IBM Spectrum Virtualize: security vulnerability | 7.5 | |
| High | CVE-2018-1438 | IBM Spectrum Virtualize: security vulnerability | 7.5 | |
| High | CVE-2020-4686 | IBM SAN Volume Controller and Storwize Family: security vulnerability | 6.8 | |
| Medium | CVE-2018-1464 | IBM SAN Volume Controller: Information Disclosure | 6.5 | |
| High | CVE-2018-1462 | IBM SAN Volume Controller: Denial of Service | 7.6 | |
| Medium | CVE-2018-1463 | IBM SAN Volume Controller: security vulnerability | 6.5 | |
| High | CVE-2018-1434 | IBM SAN Volume Controller: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2018-1465 | IBM SAN Volume Controller: security vulnerability | 5.3 | |
| Medium | CVE-2018-1461 | IBM SAN Volume Controller: Cross-Site Scripting (XSS) | 5.4 | |
| Medium | CVE-2018-1466 | IBM SAN Volume Controller: security vulnerability | 5.3 |