Known vulnerabilities in IBM Power Hardware Management Console (HMC) - page 10
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:hmc:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
185
Public exploits:
21
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.3.1064.1
11.1.1111.3
11.1.1111.2
11.1.1111.1
11.1.1112.0
10.3.1064.0
11.1.1111.5
10.3.1063.2
11.1.1111.4
11.1.1111.0
10.3.1063.1
10.3.1060.0 SP3
11.1.1110.0
10.3.1060.0 SP2
10.3.1060.0 SP1
10.2.1040.0 SP3
10.3.1060.0
10.3.1050.0 SP1
10.2.1040.0 SP2
10.3.1050.0
10.1.1020.0 SP3
10.2.1040.0 SP1
10.1.1020.0 SP2
10.1.1020.0
10.2.1040.0
10.2.1030.0 SP1
10.2.1030.0
10.1.1020.0 SP1
9.2.950.0 SP3
Vulnerabilities (185)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU68442 - Improper input validation CVE-2022-21619 |
CWE-20 | Low | 9.2.950.0 SP3, 10.1.1020.0 SP1, 10.2.1030.0, 10.2.1030.0 SP1 | 18.10.2022 |
SB2022101901 SB2022101902 SB2022102012 and 140 more |
||
| #VU64079 - Missing release of memory after effective lifetime CVE-2022-1012 |
CWE-401 | Medium | 9.2.950.0 SP3, 10.1.1020.0 SP1 | 08.06.2022 |
SB2022060827 SB2022061417 SB2022062437 and 75 more |
||
| #VU59057 - Server-Side Request Forgery (SSRF) CVE-2021-44224 |
CWE-918 | Medium | 9.2.950.0 SP3, 10.1.1020.0 SP1 | 20.12.2021 |
SB2021122005 SB2021122021 SB2021122709 and 33 more |
||
| #VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33193 |
CWE-444 | Medium | 9.2.950.0 SP3, 10.1.1020.0 SP1 | 13.09.2021 |
SB2021091317 SB2021091707 SB2021092301 and 24 more |
||
| #VU53778 - NULL Pointer Dereference CVE-2020-13950 |
CWE-476 | Medium | 9.2.950.0 SP3, 10.1.1020.0 SP1 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 15 more |
Showing elements 181 - 200 out of 185