Global Storage

Global Storage Forum

Connect, collaborate, and stay informed with insights from across Storage

 View Only

  • 1.  CVE search: secret encoder ring required

    Posted 04/11/25 07:53 AM

    When using IBM's CVE search site, https://www.ibm.com/support/pages/bulletin/ and you want to search by product, do NOT individualize between 7300 or 7200.  Instead pick IBM FlashSystem 7x00.  Otherwise you'll miss a lot of CVE's.  One example being

    https://www.ibm.com/support/pages/node/7184182



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------


  • 2.  RE: CVE search: secret encoder ring required

    Posted 04/11/25 10:06 AM

    In my opinion, the CVE hunt for FlashSystem is a bit unnecessary. if you are using your FlashSystem on segmented VLAN, using http proxy to communicate with support center (call home). You don't need to hunt the CVE's. You can subscribe to the FlashSystem product notifications and if there is a high-level CVE, you will get an email about it.

    here's the link for the IBM product notification subscription:

    https://www.ibm.com/systems/support/myview/subscription/css.wss



    ------------------------------
    Nezih Boyacioglu
    ------------------------------



  • 3.  RE: CVE search: secret encoder ring required

    Posted 04/11/25 10:18 AM

    You are entitled to your opinion.  I have my own.  I am already subscribed to the notifications.  I do get the notifications.  If a notification is for a release I'm not at yet, I ignore the email.  When I upgrade I check the CVE site.  There is a reason IBM has this site.

    I may have also missed an email.  I get busy.



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------

    Original Message


Related Content