Approved changes feed: RSS · Atom

cpe:2.3:h:ibm:flashsystem_900:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductFlashsystem 900 (bfd2d992-e21a-5b1c-984d-3d17b45548b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4987 not_vulnerable 2026-06-08 05:26:41.333315 Details available
MEDIUM (6.4)
The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and prior. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2021-05-04T15:45:14.502Z
Updated: 2024-09-17T03:59:23.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1495 not_vulnerable 2026-06-08 05:11:18.315914 Details available
MEDIUM (6.5)
IBM FlashSystem V840 and V900 products could allow an authenticated attacker with specialized access to overwrite arbitrary files which could cause a denial of service. IBM X-Force ID: 141148.
Published: 2018-05-29T17:00:00.000Z
Updated: 2025-02-13T16:27:16.918Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.