Approved changes feed: RSS · Atom

cpe:2.3:o:ibm:san_volume_controller_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSan Volume Controller Firmware (c8b47c32-fbae-5024-aa51-6a5ee0bf28a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29873 vulnerable 2026-06-08 05:31:27.183102 Details available
HIGH (8.8)
IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229.
Published: 2021-10-21T16:40:13.636Z
Updated: 2024-09-16T20:17:23.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1466 vulnerable 2026-06-08 05:11:18.270115 Details available
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.
Published: 2018-05-17T21:00:00.000Z
Updated: 2024-09-16T17:03:03.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1465 vulnerable 2026-06-08 05:11:18.268566 Details available
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain the private key which could make intercepting GUI communications possible. IBM X-Force ID: 140396.
Published: 2018-05-17T21:00:00.000Z
Updated: 2024-09-16T18:14:09.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1464 vulnerable 2026-06-08 05:11:18.266872 Details available
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395.
Published: 2018-05-17T21:00:00.000Z
Updated: 2024-09-16T20:17:34.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1463 vulnerable 2026-06-08 05:11:18.264783 Details available
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368.
Published: 2018-05-17T21:00:00.000Z
Updated: 2024-09-16T16:52:50.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1462 vulnerable 2026-06-08 05:11:18.263318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1461 vulnerable 2026-06-08 05:11:18.257059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1438 vulnerable 2026-06-08 05:11:18.192601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1434 vulnerable 2026-06-08 05:11:18.182972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1433 vulnerable 2026-06-08 05:11:18.173784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7169 vulnerable 2026-06-08 05:05:58.815331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6271 vulnerable 2026-06-08 05:05:57.220022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.