Ibm Storage Fusion Hci vulnerabilities
4 known vulnerabilities affecting ibm/storage_fusion_hci.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2025-36222CRITICALCVSS 9.8≥ 2.2.0, < 2.11.02025-09-11
CVE-2025-36222 [CRITICAL] CWE-1188 CVE-2025-36222: IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx
IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions.
nvd
CVE-2024-22315MEDIUMCVSS 6.5≥ 2.3.0, < 2.9.02025-01-28
CVE-2024-22315 [MEDIUM] CWE-923 CVE-2024-22315: IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by al
IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection.
nvd
CVE-2023-43040CRITICALCVSS 9.8≥ 2.5.2, < 2.8.02024-05-14
CVE-2023-43040 [CRITICAL] CWE-1220 CVE-2023-43040: IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions
IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
nvd
CVE-2023-50948CRITICALCVSS 9.8≥ 2.1.0, < 2.7.1≥ 2.1.0, ≤ 2.6.12024-01-08
CVE-2023-50948 [CRITICAL] CWE-259 CVE-2023-50948: IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cr
IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671.
nvd