What’s Vulnerable › Vulnerabilities

CVE-2018-1775

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-02-27 · updated 2026-06-17
• Weakness: CWE-200

Description

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.

Affected products

• IBM Spectrum Virtualize Software: from 7.5 through 8.2
• IBM Spectrum Virtualize Software For Public Cloud: from 7.5 through 8.2

References

• http://www.securityfocus.com/bid/107187
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148757
• https://www.ibm.com/support/docview.wss?uid=ibm10872486
• http://www.securityfocus.com/bid/107187
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148757
• https://www.ibm.com/support/docview.wss?uid=ibm10872486

Get alerted when CVE-2018-1775 or the next vulnerability affects your stack