Storage Scale
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:storage_scale:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Storage Scale (8b102219-aa4b-5bc6-9c69-249886435a4a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-14604 |
vulnerable | 2026-06-08 07:06:34.823368 |
The following vulnerabilities, which may affect IBM Storage Scale when a directory has a specific ACL composition and could lead to improper execute permissions, have been remediated in Storage Scale versions 5.2.3.6 and 6.0.0.2
MEDIUM (6.6)
IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors.
Published: 2026-03-03T19:48:51.113Z
Updated: 2026-03-04T14:18:56.084Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31892 |
vulnerable | 2026-06-08 06:35:32.277800 |
IBM Storage Scale SQL injection
HIGH (7.5)
IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 could allow a user to perform unauthorized actions after intercepting and modifying a csv file due to improper neutralization of formula elements.
Published: 2024-12-14T12:58:45.625Z
Updated: 2024-12-16T17:05:18.045Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31891 |
vulnerable | 2026-06-08 06:35:32.276999 |
IBM Storage Scale privilege escalation
HIGH (7.8)
IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1
contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system.
Published: 2024-12-14T13:01:34.292Z
Updated: 2024-12-16T17:03:55.695Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38002 |
vulnerable | 2026-06-08 06:08:16.674931 |
IBM Storage Scale session fixation
MEDIUM (5)
IBM Storage Scale 5.1.0.0 through 5.1.9.2 could allow an authenticated user to steal or manipulate an active session to gain access to the system. IBM X-Force ID: 260208.
Published: 2024-04-30T14:40:43.603Z
Updated: 2024-08-02T17:23:27.889Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.