CVE-2024-38320

Summary: CVE-2024-38320 affects IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client. Affected versions: 8.1.0.0 through 8.1.23.0. Root cause / vulnerability: Uses weaker than expected cryptographic algorithms that could allow an attac...

CVE-2023-35897

IBM Storage Protect Backup-Archive Client and IBM Storage Protect for Virtual Environments (Data Protection for VMware/Hyper-V) versions 8.1.0.0–8.1.19.0 are affected by a DLL hijacking flaw that could allow a local user to execute arbitrary code via a specially crafted file. The issue impacts Wi...

CVE-2026-13473

CVE-2026-13473 affects IBM Storage Protect Client. The vulnerability is a heap-based overflow caused by improper bounds checking. Affected versions: 8.1.0.0–8.1.27.0, 8.1.27.1, and 8.2.0.0–8.2.1.0. A remote attacker could overflow a heap and execute arbitrary code or crash the server. Remediation...

CVE-2023-40368

IBM Storage Protect suffers an information-disclosure vulnerability (CVE-2023-40368) affecting multiple components: Storage Protect Client; Storage Protect for Space Management; Storage Protect for Virtual Environments (Hyper-V and VMware). A privileged user could obtain sensitive data via the Ad...

CVE-2026-12628

CVE-2026-12628 affects IBM Storage Protect Client (8.1.0.0–8.2.1.0) and IBM Storage Protect Snapshot for Windows (8.1.0.0–8.2.1.0). The IBM security bulletin confirms a hardcoded credential in the FlashCopy Manager (FCM) authentication mechanism and multiple authentication code paths, enabling re...