PT-2026-29412 · Ibm · Storage Protect Server

Published 2026-04-01 · Updated 2026-04-01 · CVE-2025-13855

Mitre

CVSS v3.1

7.6

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-13855

Affected Products

Storage Protect Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-13855 · Security Note
• https://ibm.com/support/pages/node/7267783 · Patch, Vendor Advisory