CVE-2025-0160: falha de alta gravidade em IBM Storage Virtualize
IBM FlashSystem code execution
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.1epss 0.5%
IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.1) could allow a remote attacker with access to the system to execute arbitrary Java code due to improper restrictions in the RPCAdapter service.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
IBM · Storage VirtualizeCVEs relacionadas — IBM Storage Virtualize
No mesmo produto, das mais perigosas para as menos.
CVE-2025-0159CRITICALIBM FlashSystem authentication bypassEPSS 0.9%CVE-2023-43042HIGHIBM Storage Virtualize information disclosureEPSS 0.7%CVE-2023-47700MEDIUMIBM Storage Virtualize improper certificate validationEPSS 0.5%CVE-2025-36118HIGHIBM Storage Virtualize Information DisclosureEPSS 0.4%CVE-2025-36120HIGHIBM Storage Virtualize privilege escalationEPSS 0.3%CVE-2024-39723MEDIUMIBM FlashSystem denial of serviceEPSS 0.2%