IBM Diamondback Tape Library vulnerabilities

3 vulnerabilities

Known vulnerabilities in IBM Diamondback Tape Library, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2025-36239ibmdiamondback_tape_library_firmware+1
EPSS score
0.21%
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.5.4CVE-2025-36088ibmdiamondback_tape_library_firmware+1
EPSS score
0.18%
IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.8.8CVE-2024-43192ibmdiamondback_tape_library_firmware+1
EPSS score
0.17%
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.