CVE-2025-36045 PUBLISHED

TS4300 Tape Library addresses security vulnerability

Assigner: ibm
Reserved: 15.04.2025 Published: 18.09.2026 Updated: 18.09.2026

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 4.3

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	Low	Integrity Impact	None
User Interaction	None	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	IBM
Product	TS4300
Versions	affected from 1.1.0.1 to 1.7.1.1 (incl.)

Solutions

For the 1.7.1.1, upgrade to version 1.7.2.0 or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/ .

All future releases will include the fix for this vulnerability.

References

https://www.ibm.com/support/pages/node/7287022

Problem Types

CWE-799 Improper Control of Interaction Frequency CWE