CVE-2025-36118

IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.

Scoring

Severity

HIGH

CVSS base score

7.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS probability

0.36%

CWE

CWE-244

Published

2025-11-17

Last modified

2026-03-13

Affected products

• IBM Storage Virtualize
• IBM Storage Virtualize
• IBM Storage Virtualize
• IBM Storage Virtualize

Weakness type

• CWE-244

Related vulnerabilities

• CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
• CVE-2026-48025 — nebula-mesh: Decrypted CA private key persists in heap after signing
• CVE-2026-20039 — Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability
• CVE-2025-33101 — Multiple Vulnerabilities in IBM Concert Software.
• CVE-2025-1722 — Multiple Vulnerabilities in IBM Concert Software
• CVE-2025-1719 — Multiple Vulnerabilities in IBM Concert Software
• CVE-2025-1721 — BM Concert Software Improper Clearing of Heap Memory Before Release.
• CVE-2025-36083 — Multiple Vulnerabilities in IBM Concert Software.

Markdown version · Browse all CVEs