CVEvulnerability
CVE-2025-0160
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2025-02-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-114
Description
IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.1) could allow a remote attacker with access to the system to execute arbitrary Java code due to improper restrictions in the RPCAdapter service.
Affected configurations
• ibm storage virtualize (>= 8.5 < 8.5.0.14)
• ibm storage virtualize (>= 8.5.2.0 <= 8.5.2.3)
• ibm storage virtualize (>= 8.6.0.0 < 8.6.0.6)
• ibm storage virtualize (>= 8.7.0.0 < 8.7.0.3)
• ibm storage virtualize 8.5.1.0
• ibm storage virtualize 8.5.3.0
• ibm storage virtualize 8.5.3.1
• ibm storage virtualize 8.5.4.0
• ibm storage virtualize 8.6.1.0
• ibm storage virtualize 8.6.2.0
• ibm storage virtualize 8.6.2.1
• ibm storage virtualize 8.6.3.0
• ibm storage virtualize 8.7.1.0
• ibm storage virtualize 8.7.2.0
• ibm storage virtualize 8.7.2.1
Related
Weakness · CWE (1)
- CWE-114 Process Control weakness
References
- https://www.ibm.com/support/pages/node/7184182 Vendor Advisory