Veille CVE

Octobre 2026

4 CVE

  1. CVE-2026-19178 6.8 Moyenne

    IBM Storage TS4500 Library

    IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

  2. CVE-2025-36252 6.3 Moyenne

    IBM Storage TS4500 Library

    IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.

  3. CVE-2025-36069 5.5 Moyenne

    IBM Storage TS4500 Library

    IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

  4. CVE-2025-36061 6.5 Moyenne

    IBM Storage TS4500 Library

    IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.