DS8900F ( R9.4) vulnerabilities

3 known vulnerabilities in DS8900F ( R9.4) from IBM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  DS8A00( R10.0 - R10.1 ): Privilege Defined With Unsafe Actions

  CVE-2025-36255Aug 19, 2026IBM

  IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.

• 7.4 High severity

  DS8A00 (R10.0 - R10.1): Improper Encoding or Escaping of Output

  CVE-2025-36254Aug 19, 2026IBM

  IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial o

• 7.1 High severity

  DS8A00( R10.1): Missing Authorization

  CVE-2025-36192Dec 26, 2025IBM

  IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8000 could allow a local user with authorized CCW update permissions to delete or corrupt backups due to missing