Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:storage_ts4500_library:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductStorage Ts4500 Library (8b0e2144-e058-5057-880f-0a8e52e54c00)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-19178 vulnerable 2026-11-03 10:18:00.080942 TS4500 Tape Library Race Condition
MEDIUM (6.8)
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.
Published: 2026-10-19T22:50:34.565Z
Updated: 2026-10-20T13:52:27.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36252 vulnerable 2026-11-03 10:04:22.671038 TS4500 Tape Library Insufficient Session Expiration
MEDIUM (6.3)
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.
Published: 2026-10-19T22:50:46.164Z
Updated: 2026-10-22T21:15:40.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36069 vulnerable 2026-11-03 10:04:20.523499 TS4500 Tape Library Insufficient Session Expiration
MEDIUM (5.5)
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Published: 2026-10-19T22:50:54.345Z
Updated: 2026-10-20T16:08:12.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36061 vulnerable 2026-11-03 10:04:20.269537 TS4500 Tape Library Denial of Service
MEDIUM (6.5)
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.
Published: 2026-10-19T22:51:04.688Z
Updated: 2026-10-20T14:41:22.294Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.