CVE-2025-1137CWE-250

IBM Storage Scale command injection

High · published May 10, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
35.8
In the wild
Unconfirmed
What it is

IBM Storage Scale 5.2.2.0 and 5.2.2.1, under certain configurations, could allow an authenticated user to execute privileged commands due to improper input neutralization.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00426 · 35.8th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2025-05-10T01:56Z
EPSS history
Timeline
  • 10 MAY 01:56Z
    IBM Storage Scale command injection
    cvelistv5