IBM Storwize v5000 Software vulnerabilities

2 CVEs affecting IBM Storwize v5000 Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-29873, published 2021-10-21.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-0880, published 2014-03-29. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain…
• CVE-2021-29873, published 2021-10-21. High severity, CVSS 8.1. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229.