[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbczF96-hVU1ns8jgYYhA8xeDROwHGKsJ-E7vn8qTa2M":3,"g5a-family:ibm\u002Fsan_volume_controller_firmware":294,"g5a-ex:ibm\u002Fsan_volume_controller_firmware@*":295},{"success":4,"data":5},true,{"product":6,"versions":144,"topVulnerabilitiesByEpss":208,"kevVulnerabilities":264,"seoMetadata":272,"meta":291},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":143},"ibm","san_volume_controller_firmware",63,14,2,"2021-10-21",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"6.1.0.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.0.0",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"6.3.0.0",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"6.4.0.0",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"7.1.0.0",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"7.1.0.11",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.0.0",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.0.9",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"7.3.0.0",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"7.3.0.7",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"7.4.0.0",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"7.5.0.0",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"7.5.0.14",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"7.6.0.0",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"7.6.1.0",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.0.0",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.0.1",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.0",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.1",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.2",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.3",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.4",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.5",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.6",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.7",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.8",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"7.7.1.9",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.0.0",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.0.1",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.0.2",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.0",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.1",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.10",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.11",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.12",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.2",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.3",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.4",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.5",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.6",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.7",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.8",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"7.8.1.9",{"version":103,"cve_count":104,"kev_count":16,"has_kev":17},"8.1",1,{"version":106,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.0.0",{"version":108,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.0.1",{"version":110,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.0.2",{"version":112,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.1.0",{"version":114,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.1.1",{"version":116,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.1.2",{"version":118,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.2.0",{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.2.1",{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.3.5",{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.3.6",{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},"8.2.1.4",{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},"8.2.1.5",{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},"8.2.1.6",{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},"8.3.0.0",{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},"8.3.0.1",{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},"8.3.0.2",{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},"8.3.0.3",{"version":140,"cve_count":104,"kev_count":16,"has_kev":17},"8.3.1",{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},"8.3.1.1","San Volume Controller Firmware by Ibm is a technology product with 63 tracked versions and 14 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":104,"kev_count":16,"has_kev":17},{"version":106,"cve_count":16,"kev_count":16,"has_kev":17},{"version":108,"cve_count":16,"kev_count":16,"has_kev":17},{"version":110,"cve_count":16,"kev_count":16,"has_kev":17},{"version":112,"cve_count":16,"kev_count":16,"has_kev":17},{"version":114,"cve_count":16,"kev_count":16,"has_kev":17},{"version":116,"cve_count":16,"kev_count":16,"has_kev":17},{"version":118,"cve_count":16,"kev_count":16,"has_kev":17},{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},{"version":140,"cve_count":104,"kev_count":16,"has_kev":17},{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},[209,217,222,228,235,239,245,251,255,259],{"cveId":210,"description":211,"publishedDate":212,"cvssScore":213,"cvssVersion":214,"severity":215,"isKev":4,"epssScore":216},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":218,"description":219,"publishedDate":220,"cvssScore":213,"cvssVersion":214,"severity":215,"isKev":4,"epssScore":221},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":223,"description":224,"publishedDate":225,"cvssScore":213,"cvssVersion":226,"severity":215,"isKev":17,"epssScore":227},"CVE-2017-1710","A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531.","2017-11-13","v3.0",0.03498,{"cveId":229,"description":230,"publishedDate":231,"cvssScore":232,"cvssVersion":214,"severity":233,"isKev":17,"epssScore":234},"CVE-2018-1433","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler \u002FDownloadFile does not require authentication to read arbitrary files from the system. IBM X-Force ID: 139473.","2018-05-17",7.5,"High",0.02506,{"cveId":236,"description":237,"publishedDate":231,"cvssScore":232,"cvssVersion":214,"severity":233,"isKev":17,"epssScore":238},"CVE-2018-1438","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler \u002FDLSnap could allow an unauthenticated attacker to read arbitrary files on the system. IBM X-Force ID: 139566.",0.02244,{"cveId":240,"description":241,"publishedDate":231,"cvssScore":242,"cvssVersion":214,"severity":243,"isKev":17,"epssScore":244},"CVE-2018-1464","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395.",6.5,"Medium",0.01618,{"cveId":246,"description":247,"publishedDate":248,"cvssScore":249,"cvssVersion":214,"severity":233,"isKev":17,"epssScore":250},"CVE-2020-4686","IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678.","2020-08-17",8.1,0.01578,{"cveId":252,"description":253,"publishedDate":12,"cvssScore":249,"cvssVersion":214,"severity":233,"isKev":17,"epssScore":254},"CVE-2021-29873","IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229.",0.01526,{"cveId":256,"description":257,"publishedDate":231,"cvssScore":242,"cvssVersion":214,"severity":243,"isKev":17,"epssScore":258},"CVE-2018-1463","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368.",0.01394,{"cveId":260,"description":261,"publishedDate":231,"cvssScore":262,"cvssVersion":214,"severity":243,"isKev":17,"epssScore":263},"CVE-2018-1465","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain the private key which could make intercepting GUI communications possible. IBM X-Force ID: 140396.",5.3,0.01318,[265,270],{"cveId":210,"description":211,"publishedDate":212,"cvssScore":213,"severity":215,"isKev":4,"epssScore":216,"cisaVulnName":266,"cisaDateAdded":267,"cisaShortDescription":268,"cisaRequiredAction":269},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":218,"description":219,"publishedDate":220,"cvssScore":213,"severity":215,"isKev":4,"epssScore":221,"cisaVulnName":266,"cisaDateAdded":267,"cisaShortDescription":271,"cisaRequiredAction":269},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":273,"metaDescription":274,"keywords":275,"structuredData":276},"San Volume Controller Firmware by Ibm - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for San Volume Controller Firmware by Ibm covering 63 versions with 14 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","San Volume Controller Firmware vulnerabilities, San Volume Controller Firmware security, San Volume Controller Firmware CVE, Ibm San Volume Controller Firmware, San Volume Controller Firmware threat intelligence, Ibm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, San Volume Controller Firmware KEV, San Volume Controller Firmware exploited vulnerabilities",{"@context":277,"@type":278,"name":279,"description":274,"url":280,"manufacturer":281,"applicationCategory":285,"softwareVersion":286,"mainEntity":287},"https:\u002F\u002Fschema.org","SoftwareApplication","San Volume Controller Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fibm\u002Fsan_volume_controller_firmware",{"@type":282,"name":283,"url":284},"Organization","Ibm","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fibm","Security Software","63 versions tracked",{"@type":288,"name":289,"description":290,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","San Volume Controller Firmware Security Vulnerabilities","Security vulnerabilities affecting San Volume Controller Firmware by Ibm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":292,"apiVersion":293},"2026-10-18T16:41:23.133Z","3.0",[],{"rows":296,"total":11,"capped":17,"failed":16},[297,304],{"cveId":210,"name":266,"severity":215,"cvss":213,"added":267,"epss":216,"published":298,"ranges":299,"checked":4,"hits":303,"covers":17},"2014-09-24T18:48:04.477",[300,301,302],"1.1.0.0 to before 7.1.0.11","7.2.0.0 to before 7.2.0.9","7.3.0.0 to before 7.3.0.7",[],{"cveId":218,"name":266,"severity":215,"cvss":213,"added":267,"epss":221,"published":305,"ranges":306,"checked":4,"hits":307,"covers":17},"2014-09-25T01:55:04.367",[300,301,302],[]]