IBM Storage Fusion Hci vulnerabilities

4 CVEs affecting IBM Storage Fusion Hci, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36222, published 2025-09-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-43040, published 2024-05-14. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
CVE-2023-50948, published 2024-01-08. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to…
CVE-2025-36222, published 2025-09-11. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without…
CVE-2024-22315, published 2025-01-28. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network…