IBM Storage Protect vulnerabilities

5 CVEs affecting IBM Storage Protect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13473, published 2026-07-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-13473, published 2026-07-17. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A…
CVE-2026-12628, published 2026-06-22. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 could allow a remote attacker to bypass authentication due to the use of a…
CVE-2023-35897, published 2023-10-06. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments 8.1.0.0 through 8.1.19.0 could allow a local user to execute arbitrary code on the system using a specially crafted file,…
CVE-2024-38320, published 2025-01-27. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that…
CVE-2023-40368, published 2023-09-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Storage Protect 8.1.0.0 through 8.1.19.0 could allow a privileged user to obtain sensitive information from the administrative command line client. IBM X-Force ID: 263456.