IBM Storage Ts4500 Library vulnerabilities
7 vulnerabilities
Known vulnerabilities in IBM Storage Ts4500 Library, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-19178ibmstorage ts4500 library
EPSS score0.19%
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.CVE-2025-36252ibmstorage ts4500 libraryEPSS score0.15%
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.CVE-2025-36069ibmstorage ts4500 libraryEPSS score0.12%
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.CVE-2025-36061ibmstorage ts4500 libraryEPSS score0.24%
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.CVE-2025-36239ibmdiamondback_tape_library_firmware+1EPSS score0.21%
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0
is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2025-36088ibmdiamondback_tape_library_firmware+1EPSS score0.18%
IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2024-43192ibmdiamondback_tape_library_firmware+1EPSS score0.17%
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.