Low Severity

Security Bulletin: Vulnerabilities in Java SE affect the IBM FlashSystem models 840 and 900

Share this post:

Multiple vulnerabilities in Java SE (CVE-2020-14579, CVE-2020-14578, and CVE-2020-14577) affect the IBM FlashSystem models 840 and 900.

Affected product(s) and affected version(s):

Storage Node machine type and models (MTMs) affected:

  • 9840-AE1 and 9843-AE1
  • 9840-AE2 and 9843-AE2
  • 9840-AE3 and 9843-AE3
Supported storage node code versions which are affected:
  • VRMFs prior to 1.5.2.8
  • VRMFs prior to 1.6.1.3
Note: For information on IBM FlashSystem V9000 SVC code levels affected and remediated, search for the equivalent security bulletin here: IBM Support

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6443369

More stories

Security Bulletin: A vulnerabilities in IBM Java affects IBM Developer for z Systems.

May 17, 2021 8:01 pm EDT | Low Severity

A vulnerability identified in IBM® SDK Java™ Technology Edition Version 1.8 is used by IBM Developer for z Systems. The issue was disclosed as part of the IBM Java SDK updates in October 2020. ...read more


Security Bulletin: IBM Planning Analytics Spreadsheet Services is affected by a security vulnerability

May 13, 2021 8:00 pm EDT | Low Severity

The Planning Analytics Spreadsheet Services component of IBM Planning Analytics is affected by a vulnerability. This has been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Spreadsheet Services Release 64. ...read more


Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to overly permissive CORS policy (CVE-2021-20429)

May 13, 2021 8:00 pm EDT | Low Severity

User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to overly permissive CORS policy. ...read more