Known vulnerabilities in IBM Power Hardware Management Console (HMC)
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:hmc:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
202
Public exploits:
22
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
11.1.1112.1
10.3.1064.1
11.1.1111.3
11.1.1111.2
11.1.1111.1
11.1.1112.0
10.3.1064.0
11.1.1111.5
10.3.1063.2
11.1.1111.4
11.1.1111.0
10.3.1063.1
10.3.1060.0 SP3
11.1.1110.0
10.3.1060.0 SP2
10.3.1060.0 SP1
10.2.1040.0 SP3
10.3.1060.0
10.3.1050.0 SP1
10.2.1040.0 SP2
10.3.1050.0
10.1.1020.0 SP3
10.2.1040.0 SP1
10.1.1020.0 SP2
10.1.1020.0
10.2.1040.0
10.2.1030.0 SP1
10.2.1030.0
10.1.1020.0 SP1
9.2.950.0 SP3
Vulnerabilities (202)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131182 - Improper input validation CVE-2026-41293 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.0 | 12.05.2026 |
SB2026051281 SB2026051592 SB2026052607 and 22 more |
||
| #VU128476 - Improper Access Control CVE-2026-35387 |
CWE-284 | Low | 10.3.1064.1, 11.1.1112.1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 17 more |
||
| #VU127864 - Improper control of a resource through its lifetime CVE-2026-31431 |
CWE-664 | High | 10.3.1064.1, 11.1.1112.1 | 25.04.2026 |
SB20260425182 SB2026043080 SB2026050204 and 129 more |
||
| #VU127046 - Improper input validation CVE-2026-27135 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.1 | 23.04.2026 |
SB2026042395 SB20260423101 SB20260423102 and 33 more |
||
| #VU126758 - Improper input validation CVE-2026-22016 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 79 more |
||
| #VU126759 - Improper input validation CVE-2026-34282 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 37 more |
||
| #VU126761 - Improper input validation CVE-2026-22021 |
CWE-20 | Medium | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 81 more |
||
| #VU126763 - Improper input validation CVE-2026-22008 |
CWE-20 | Low | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB2026050683 SB20260513117 and 20 more |
||
| #VU126764 - Improper input validation CVE-2026-22018 |
CWE-20 | Low | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 78 more |
||
| #VU126765 - Improper input validation CVE-2026-22007 |
CWE-20 | Low | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 78 more |
||
| #VU126766 - Improper input validation CVE-2026-34268 |
CWE-20 | Low | 10.3.1064.1, 11.1.1112.1 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 78 more |
||
| #VU125987 - Integer underflow CVE-2026-33999 |
CWE-191 | Low | 10.3.1064.1, 11.1.1112.1 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 36 more |
||
| #VU125989 - Use After Free CVE-2026-34001 |
CWE-416 | Low | 10.3.1064.1, 11.1.1112.1 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 36 more |
||
| #VU125991 - Out-of-bounds read CVE-2026-34003 |
CWE-125 | Low | 10.3.1064.1, 11.1.1112.1 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 36 more |
||
| #VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-24880 |
CWE-444 | Medium | 10.3.1064.1, 11.1.1112.0 | 09.04.2026 |
SB20260409109 SB20260417131 SB20260422214 and 19 more |
||
| #VU124014 - Resource Management Errors CVE-2026-3497 |
CWE-399 | Low | 10.3.1064.1, 11.1.1112.1 | 13.03.2026 |
SB2026031837 SB2026031838 SB2026031839 and 19 more |
||
| #VU123884 - Integer overflow CVE-2026-23865 |
CWE-190 | Medium | 10.3.1064.1, 11.1.1112.1 | 11.03.2026 |
SB2026031140 SB2026031141 SB2026031523 and 51 more |
||
| #VU122082 - Out-of-bounds write CVE-2025-69419 |
CWE-787 | Low | 10.3.1064.0, 11.1.1112.0 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 69 more |
||
| #VU120551 - Integer overflow CVE-2025-68724 |
CWE-190 | Low | 10.3.1064.1, 11.1.1112.1 | 26.12.2025 |
SB20251226293 SB2026012390 SB2026012633 and 45 more |
||
| #VU115166 - Uncontrolled Recursion CVE-2025-9714 |
CWE-674 | Medium | 10.3.1064.1, 11.1.1112.1 | 11.09.2025 |
SB2025091153 SB2025091154 SB2025091275 and 36 more |
Showing elements 1 - 20 out of 202