SQL Injection Vulnerability in IBM Storage Protect Server by IBM

CVE-2025-13855

What is CVE-2025-13855?

IBM Storage Protect Server 8.2.0 is susceptible to a significant SQL injection vulnerability, which enables remote attackers to manipulate the back-end database. By sending specially crafted SQL statements, attackers can gain unauthorized access to sensitive data, allowing them to view, add, modify, or delete critical information. This vulnerability poses serious risks to data integrity and confidentiality, highlighting the need for immediate action to secure the affected systems.

References