CVE-2025-0160CWE-114

IBM FlashSystem code execution

High · published February 28, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
43.6
In the wild
Unconfirmed
What it is

IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.1) could allow a remote attacker with access to the system to execute arbitrary Java code due to improper restrictions in the RPCAdapter service.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00524 · 43.6th percentile
Weakness
CWE-114 · Process Control
Published
2025-02-28T19:02Z
EPSS history
Timeline
  • 28 FEB 19:02Z
    IBM FlashSystem code execution
    cvelistv5