IBM Storage Fusion vulnerabilities

2 CVEs affecting IBM Storage Fusion, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36222, published 2025-09-11.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-36222, published 2025-09-11. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without…
• CVE-2024-22315, published 2025-01-28. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network…