IBM Storage Defender vulnerabilities

3 CVEs affecting IBM Storage Defender, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-38325, published 2025-01-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-38324, published 2024-09-25. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an…
CVE-2024-38325, published 2025-01-27. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel.…
CVE-2024-25031, published 2024-06-28. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could allow an attacker on the network to brute force account credentials. IBM X-Force…