IBM Storage Fusion Hci vulnerabilities
4 vulnerabilities
Known vulnerabilities in IBM Storage Fusion Hci, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2025-36222ibm · fusion +5 moreIBM Fusion insecure default configurationIBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions.CVSS9.8CriticalEPSS0.39%RoutineCVE-2024-22315ibm · fusion +5 moreIBM Fusion improper communication restrictionIBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection.CVSS6.5MediumEPSS0.23%RoutineCVE-2023-43040ibm · spectrum fusion hci +3 moreIBM Spectrum Fusion HCI improper access controlIBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.CVSS9.8CriticalEPSS3.06%RoutineCVE-2023-50948ibm · storage_fusion_hciIBM Storage Fusion HCI information disclosureIBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671.CVSS9.8CriticalEPSS0.50%