EUVD-2026-104667

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition...

EUVD-2025-211136

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources...

CVE-2026-19178

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition...

CVE-2025-36069

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

CVE-2025-36061

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources...

CVE-2025-36061 TS4500 Tape Library Denial of Service

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources...

CVE-2025-36061

The IBM Storage TS4500 Library (versions 1.1.1.6 through 1.12.0.3) and IBM Diamondback Tape Library are vulnerable to a Denial of Service (DoS) attack. An authenticated user can submit specially crafted SMTP requests that consume excessive system resources (CWE-770), leading to a high availabilit...

CVE-2025-36061 TS4500 Tape Library Denial of Service

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources...

CVE-2025-36069 TS4500 Tape Library Insufficient Session Expiration

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

CVE-2025-36069 TS4500 Tape Library Insufficient Session Expiration

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

CVE-2025-36069

The IBM Storage TS4500 Library (versions 1.1.1.6 through 1.12.0.3 ) is vulnerable to Insufficient Session Expiration (CWE-613). The Web UI and REST interfaces fail to properly invalidate active user sessions following security-sensitive actions, such as logouts, password changes, password resets,...

CVE-2025-36061: Allocation of Resources Without Limits or Throttling

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources...

CVE-2025-36252: Insufficient Session Expiration

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system...

CVE-2025-36069: Insufficient Session Expiration

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

PT-2026-117689

Name of the Vulnerable Software and Affected Versions IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library affected versions not specified Description An authenticated user can trigger a denial of service by sending specially crafted SMTP requests. This action...

PT-2026-117694

Name of the Vulnerable Software and Affected Versions IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 Description A race condition exists that could allow a remote authenticated attacker to gain unauthorized administrative privileges. A race condition is a situation where the system'...

IBM Storage TS4500 Library: Competing conditions issue vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability due to race conditions. This vulnerability may allow remote authenticated attackers to obtain unauthorized management privileges...

IBM Storage TS4500 Library Session Mechanism Vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability related to session management. This vulnerability arises from the failure to invalidate sessions after they are logged out, which may allow authenticated users to impersonate other users on the system...

IBM Storage TS4500 Library Resource Management Vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a resource management vulnerability. This vulnerability arises from specially crafted SMTP requests, which consume excessive system resources and may cause denial of service for authenticated users...

IBM Storage TS4500 Library Session Mechanism Vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability related to session mechanisms. This vulnerability arises from sessions not being invalidated, which may allow authenticated users to impersonate another user on the system...