PT-2026-29412 · Ibm · Ibm Storage Protect Plus Server

CVE-2025-13855 · Published 2026-03-26 · Updated 2026-04-02

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Storage Protect Server and IBM Storage Protect Plus Server versions 8.2.0

Description IBM Storage Protect Server and IBM Storage Protect Plus Server are susceptible to SQL injection. A remote attacker could submit crafted SQL statements, potentially enabling them to view, add, modify, or delete information within the back-end database.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2026-08589

CVE-2025-13855

Affected Products

Ibm Storage Protect Plus Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-13855 · Security Note
• https://bdu.fstec.ru/vul/2026-08589 · Security Note
• https://dbugs.ptsecurity.com/vulnerability/PT-2026-29412 · Note
• https://twitter.com/CVEarity/status/2039254346039521526 · Twitter Post
• https://ibm.com/support/pages/node/7267783 · Vendor Advisory, Patch
• https://twitter.com/CCBalert/status/2039715666039566565 · Twitter Post
• https://twitter.com/CVEnew/status/2039372070727934178 · Twitter Post