PatchTheCVEstorage defender vulnerabilities and fixes
Recent CVEs affecting storage defender, with upgrade or downgrade steps. 2 tracked.
Also searched as: storagedefender.
storage defender has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-01-27. Highest priority: CVE-2024-38324 (score 33/100).
- CVE-2024-38325 MEDIUM 5.9 UPGRADE IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to ob
- CVE-2024-38324 MEDIUM 5.9 UPGRADE IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during
FAQ
How do I fix storage defender vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is storage defender being exploited right now?
None of the tracked storage defender CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which storage defender CVE should I patch first?
CVE-2024-38324 currently ranks highest (33/100): IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during .