CVE-2022-43869: IBM Spectrum Scale denial of service

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-12 · updated 2026-06-17
Weakness: CWE-134

Description

IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service through the GUI using a format string attack. IBM X-Force ID: 239539.

Affected products

IBM Elastic Storage System: from 6.1.0.0 through 6.1.2.4; from 6.1.3.0 through 6.1.4.1
IBM Spectrum Scale: from 5.1.0.0 through 5.1.2.8; from 5.1.3.0 through 5.1.5.1

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/239539
https://www.ibm.com/support/pages/node/6909465
https://www.ibm.com/support/pages/node/6909469
https://exchange.xforce.ibmcloud.com/vulnerabilities/239539
https://www.ibm.com/support/pages/node/6909465
https://www.ibm.com/support/pages/node/6909469

Get alerted when CVE-2022-43869 or the next vulnerability affects your stack