Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:storage_fusion_hci:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductStorage Fusion Hci (1605c3f1-3999-50ca-96dc-818494db4d99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36222 vulnerable 2026-06-08 07:21:01.469503 IBM Fusion insecure default configuration
HIGH (8.7)
IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions.
Published: 2025-09-11T20:44:06.696Z
Updated: 2026-02-26T17:48:40.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22315 vulnerable 2026-06-08 06:29:34.508951 IBM Fusion improper communication restriction
MEDIUM (4)
IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection.
Published: 2025-01-28T01:50:54.965Z
Updated: 2025-01-28T15:16:13.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50948 vulnerable 2026-06-08 06:16:17.115039 IBM Storage Fusion HCI information disclosure
MEDIUM (6.5)
IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671.
Published: 2024-01-08T01:43:08.302Z
Updated: 2025-06-03T14:38:46.312Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43040 vulnerable 2026-06-08 06:11:09.802369 IBM Spectrum Fusion HCI improper access control
MEDIUM (6.5)
IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
Published: 2024-05-13T02:18:30.967Z
Updated: 2025-11-04T19:25:09.433Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.