IBM Elastic Storage Server vulnerabilities

7 CVEs affecting IBM Elastic Storage Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5015, published 2021-03-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-5015, published 2021-03-24. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial of service by sending malformed UDP requests. IBM…
CVE-2020-4383, published 2020-08-24. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during deployment while configuring some of the network services.…
CVE-2020-4381, published 2020-08-19. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a denial of service during deployment or upgrade if GUI specific services are enabled.…
CVE-2016-0392, published 2016-06-19. High severity, CVSS 8.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum…
CVE-2017-1304, published 2017-06-21. Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days. IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an unsupported configuration, where users…
CVE-2020-4756, published 2020-10-20. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on…
CVE-2020-4382, published 2020-08-24. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during deployment or upgrade pertaining to xcat services. IBM…