IBM Elastic Storage System vulnerabilities

4 CVEs affecting IBM Elastic Storage System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-30434, published 2023-05-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-5015, published 2021-03-24. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial of service by sending malformed UDP requests. IBM…
CVE-2022-43869, published 2023-02-12. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to…
CVE-2020-4926, published 2022-05-24. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol.…
CVE-2023-30434, published 2023-05-05. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to…