[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4vDiGzRQOoP0gEmHqO5WDnNhl5KdfWOquCkJh3qzHOo":3,"g5a-family:ibm\u002Fstorwize_v3500":106,"g5a-ex:ibm\u002Fstorwize_v3500@*":113},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":72,"seoMetadata":84,"meta":103},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"ibm","storwize_v3500",0,15,3,"2019-02-27",[],"Storwize V3500 by Ibm is a technology product and 15 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,29,34,43,48,52,57,64,68],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2017-5638","The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.","2017-03-11",{"cveId":30,"description":31,"publishedDate":32,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":33},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":41,"epssScore":42},"CVE-2014-4811","IBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2.0.8 allow remote attackers to reset the administrator superuser password to its default value via a direct request to the administrative IP address.","2014-09-12",7.5,"v2","High",false,0.02736,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":38,"cvssVersion":22,"severity":40,"isKev":41,"epssScore":47},"CVE-2018-1433","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler \u002FDownloadFile does not require authentication to read arbitrary files from the system. IBM X-Force ID: 139473.","2018-05-17",0.02506,{"cveId":49,"description":50,"publishedDate":46,"cvssScore":38,"cvssVersion":22,"severity":40,"isKev":41,"epssScore":51},"CVE-2018-1438","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) web handler \u002FDLSnap could allow an unauthenticated attacker to read arbitrary files on the system. IBM X-Force ID: 139566.",0.02244,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":41,"epssScore":56},"CVE-2014-0880","IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrative IP address.","2014-03-29",0.01949,{"cveId":58,"description":59,"publishedDate":12,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":41,"epssScore":63},"CVE-2018-1775","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.",6.5,"v3.0","Medium",0.01924,{"cveId":65,"description":66,"publishedDate":46,"cvssScore":60,"cvssVersion":22,"severity":62,"isKev":41,"epssScore":67},"CVE-2018-1464","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to obtain sensitive information that they should not have authorization to read. IBM X-Force ID: 140395.",0.01618,{"cveId":69,"description":70,"publishedDate":46,"cvssScore":60,"cvssVersion":22,"severity":62,"isKev":41,"epssScore":71},"CVE-2018-1463","IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) could allow an authenticated user to access system files they should not have access to some of which could contain account credentials. IBM X-Force ID: 140368.",0.01394,[73,78,80],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":74,"cisaDateAdded":75,"cisaShortDescription":76,"cisaRequiredAction":77},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":30,"description":31,"publishedDate":32,"cvssScore":21,"severity":23,"isKev":4,"epssScore":33,"cisaVulnName":74,"cisaDateAdded":75,"cisaShortDescription":79,"cisaRequiredAction":77},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":26,"description":27,"publishedDate":28,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":81,"cisaDateAdded":82,"cisaShortDescription":83,"cisaRequiredAction":77},"Apache Struts Remote Code Execution Vulnerability","2021-11-03","Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.",{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Storwize V3500 by Ibm - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Storwize V3500 by Ibm with 15 tracked vulnerabilities including 3 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Storwize V3500 vulnerabilities, Storwize V3500 security, Storwize V3500 CVE, Ibm Storwize V3500, Storwize V3500 threat intelligence, Ibm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Storwize V3500 KEV, Storwize V3500 exploited vulnerabilities",{"@context":89,"@type":90,"name":91,"description":86,"url":92,"manufacturer":93,"applicationCategory":97,"softwareVersion":98,"mainEntity":99},"https:\u002F\u002Fschema.org","SoftwareApplication","Storwize V3500","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fibm\u002Fstorwize_v3500",{"@type":94,"name":95,"url":96},"Organization","Ibm","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fibm","Security Software","Multiple versions",{"@type":100,"name":101,"description":102,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Storwize V3500 Security Vulnerabilities","Security vulnerabilities affecting Storwize V3500 by Ibm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":104,"apiVersion":105},"2026-10-18T21:27:35.458Z","3.0",[107,110],{"product":108,"cves":109},"storwize_v3500_firmware",12,{"product":111,"cves":112},"storwize_v3500_software",2,{"rows":114,"total":11,"capped":41,"failed":9},[115,119,123],{"cveId":18,"name":74,"severity":23,"cvss":21,"added":75,"epss":24,"published":116,"ranges":117,"checked":4,"hits":118,"covers":41},"2014-09-24T18:48:04.477",[],[],{"cveId":30,"name":74,"severity":23,"cvss":21,"added":75,"epss":33,"published":120,"ranges":121,"checked":4,"hits":122,"covers":41},"2014-09-25T01:55:04.367",[],[],{"cveId":26,"name":81,"severity":23,"cvss":21,"added":82,"epss":24,"published":124,"ranges":125,"checked":4,"hits":126,"covers":41},"2017-03-11T02:59:00.15",[],[]]