30 matches found
EUVD-2025-210744
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions...
EUVD-2025-210743
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename...
CVE-2025-36254
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service...
CVE-2025-36255
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions...
CVE-2025-36254
CVE-2025-36254 affects the Hardware Management Console (HMC) component of IBM System Storage DS8A00 (10.1.3.0–10.11.35.0) and IBM DS8900F (89.40.83.0–89.44.25.0). The root cause is improper encoding of DSCLI command output (CWE-116), which allows an unauthenticated remote attacker to bypass secur...
CVE-2025-36254 DS8900F and DS8A00 Authentication Bypass
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service...
CVE-2025-36255
CVE-2025-36255 affects IBM System Storage DS8A00 (versions 10.1.3.0 through 10.11.35.0) and IBM DS8900F (versions 89.40.83.0 through 89.44.25.0). An authenticated user with low privileges can create a new user assigned privileged roles, due to improper privileged defined with unsafe actions . Thi...
CVE-2025-36255 DS8900F and DS8A00 Privilege Escalation
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions...
CVE-2025-36398
CVE-2025-36398 affects IBM System Storage DS8A00 (10.1.3.0–10.11.35.0) and IBM DS8900F (89.40.83.0–89.44.25.0). An authenticated user can read or modify another user's command history due to an externally controlled filename , resulting in low confidentiality and integrity impact (CVSS 3.1: 5.4 M...
CVE-2025-36398 DS8900F and DS8A00 Information Disclosure
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename...
EUVD-2023-50413
Malicious code in bioql PyPI...
EUVD-2023-50412
Malicious code in bioql PyPI...
EUVD-2023-50414
Malicious code in bioql PyPI...
EUVD-2023-50415
Malicious code in bioql PyPI...
CVE-2024-45094
IBM DS8900F and DS8A00 Hardware Management Console HMC is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2024-45094 IBM DS8900F and DS8A00 Hardware Management Console (HMC) cross-site scripting
IBM DS8900F and DS8A00 Hardware Management Console HMC is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2024-45094 IBM DS8900F and DS8A00 Hardware Management Console (HMC) cross-site scripting
IBM DS8900F and DS8A00 Hardware Management Console HMC is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2024-45094
CVE-2024-45094 affects IBM DS8900F and DS8A00 Hardware Management Console (HMC): stored cross-site scripting in the Web UI could let a privileged user inject arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. IBM notes remediation via firmware/microcode u...
PT-2025-23042 · Ibm · Ibm Ds8900F +1
Name of the Vulnerable Software and Affected Versions: IBM DS8900F and DS8A00 Hardware Management Console HMC affected versions not specified Description: The issue concerns stored cross-site scripting, allowing a privileged user to embed arbitrary JavaScript code in the Web UI. This could alter...