IBM Storwize V7000 Unified Software 1.4.0.4
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.0.4:*:*:*:*:*:*:*
part: a version: 1.4.0.4 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Storwize V7000 Unified Software (3d03b1d5-a58e-5f6a-aff8-0df99056a932) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-3077 |
vulnerable | 2026-06-08 05:05:31.027140 |
Details available
IBM SONAS and System Storage Storwize V7000 Unified (aka V7000U) 1.3.x and 1.4.x before 1.4.3.4 store the chkauth password in the audit log, which allows local users to obtain sensitive information by reading this log file.
Published: 2014-09-15T14:00:00.000Z
Updated: 2024-08-06T10:35:55.966Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5376 |
vulnerable | 2026-06-08 05:04:51.443929 |
Details available
Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user.
Published: 2013-10-17T00:00:00.000Z
Updated: 2024-08-06T17:06:52.494Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0500 |
vulnerable | 2026-06-08 05:03:48.369028 |
Details available
IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or cause a denial of service (device crash) via a (1) CIFS, (2) HTTPS, (3) SCP, or (4) SFTP operation.
Published: 2013-10-17T00:00:00.000Z
Updated: 2024-08-06T14:25:10.380Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.