PT-2026-29412 · Ibm · Ibm Storage Protect Plus Server

Published 2026-04-01 · Updated 2026-04-02 · CVE-2025-13855

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Storage Protect Server and IBM Storage Protect Plus Server versions 8.2.0

Description IBM Storage Protect Server and IBM Storage Protect Plus Server are susceptible to SQL injection. A remote attacker could submit crafted SQL statements, potentially enabling them to view, add, modify, or delete information within the back-end database.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-13855

Affected Products

Ibm Storage Protect Plus Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-13855 · Security Note
• https://twitter.com/CVEnew/status/2039372070727934178 · Twitter Post
• https://twitter.com/CCBalert/status/2039715666039566565 · Twitter Post
• https://ibm.com/support/pages/node/7267783 · Vendor Advisory, Patch
• https://twitter.com/CVEarity/status/2039254346039521526 · Twitter Post