Known vulnerabilities in IBM Power Hardware Management Console (HMC)
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:hmc:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
204
Public exploits:
22
Known exploited (KEV):
4
Breakdown by Severity Chart
11.2.1120.1
11.1.1112.3
10.3.1064.2
11.1.1112.1
10.3.1064.1
11.1.1111.3
11.1.1111.2
11.1.1111.1
11.1.1112.0
10.3.1064.0
11.1.1111.5
10.3.1063.2
11.1.1111.4
11.1.1111.0
10.3.1063.1
10.3.1060.0 SP3
11.1.1110.0
10.3.1060.0 SP2
10.3.1060.0 SP1
10.2.1040.0 SP3
10.3.1060.0
10.3.1050.0 SP1
10.2.1040.0 SP2
10.3.1050.0
10.1.1020.0 SP3
10.2.1040.0 SP1
10.1.1020.0 SP2
10.1.1020.0
10.2.1040.0
10.2.1030.0 SP1
10.2.1030.0
10.1.1020.0 SP1
9.2.950.0 SP3
Vulnerabilities (204)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137408 - Incorrect Behavior Order: Validate Before Canonicalize CVE-2026-59083 |
CWE-180 | Medium | 10.3.1064.2, 11.1.1112.3, 11.2.1120.1 | 14.07.2026 |
SB2026071451 SB2026072515 SB2026073050 and 14 more |
||
| #VU135862 - Improper Access Control CVE-2026-55956 |
CWE-284 | Medium | 10.3.1064.2, 11.1.1112.3, 11.2.1120.1 | 30.06.2026 |
SB2026063007 SB2026070957 SB2026070958 and 9 more |
||
| #VU131182 - Improper input validation CVE-2026-41293 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.0 | 12.05.2026 |
SB2026051281 SB2026051592 SB2026052607 and 36 more |
||
| #VU128476 - Improper Access Control CVE-2026-35387 |
CWE-284 | Low | 10.3.1064.1, 11.1.1112.1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 18 more |
||
| #VU127864 - Improper control of a resource through its lifetime CVE-2026-31431 |
CWE-664 | High | 10.3.1064.1, 11.1.1112.1 | 25.04.2026 |
SB20260425182 SB2026043080 SB2026050204 and 131 more |
||
| #VU127046 - Improper input validation CVE-2026-27135 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.1 | 23.04.2026 |
SB2026042395 SB20260423101 SB20260423102 and 37 more |
||
| #VU126758 - Improper input validation CVE-2026-22016 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 82 more |
||
| #VU126759 - Improper input validation CVE-2026-34282 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 39 more |
||
| #VU126761 - Improper input validation CVE-2026-22021 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 84 more |
||
| #VU126763 - Improper input validation CVE-2026-22008 |
CWE-20 | Low | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB2026050683 SB20260513117 and 20 more |
||
| #VU126764 - Improper input validation CVE-2026-22018 |
CWE-20 | Low | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 81 more |
||
| #VU126765 - Improper input validation CVE-2026-22007 |
CWE-20 | Low | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 81 more |
||
| #VU126766 - Improper input validation CVE-2026-34268 |
CWE-20 | Low | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 81 more |
||
| #VU125987 - Integer underflow CVE-2026-33999 |
CWE-191 | Low | 10.3.1064.1, 11.1.1112.1 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 36 more |
||
| #VU125989 - Use After Free CVE-2026-34001 |
CWE-416 | Low | 10.3.1064.1, 11.1.1112.1 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 36 more |
||
| #VU125991 - Out-of-bounds read CVE-2026-34003 |
CWE-125 | Low | 10.3.1064.1, 11.1.1112.1 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 36 more |
||
| #VU124014 - Resource Management Errors CVE-2026-3497 |
CWE-399 | Low | 10.3.1064.1, 11.1.1112.1 | 13.03.2026 |
SB2026031837 SB2026031838 SB2026031839 and 19 more |
||
| #VU123884 - Integer overflow CVE-2026-23865 |
CWE-190 | Medium | 10.3.1064.1, 11.1.1112.1 | 11.03.2026 |
SB2026031140 SB2026031141 SB2026031523 and 53 more |
||
| #VU120551 - Integer overflow CVE-2025-68724 |
CWE-190 | Low | 10.3.1064.1, 11.1.1112.1 | 26.12.2025 |
SB20251226293 SB2026012390 SB2026012633 and 47 more |
||
| #VU115166 - Uncontrolled Recursion CVE-2025-9714 |
CWE-674 | Medium | 10.3.1064.1, 11.1.1112.1 | 11.09.2025 |
SB2025091153 SB2025091154 SB2025091275 and 36 more |
Showing elements 1 - 20 out of 204