Known vulnerabilities in IBM Power Hardware Management Console (HMC) - page 11
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:hmc:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
204
Public exploits:
22
Known exploited (KEV):
4
Breakdown by Severity Chart
11.2.1120.1
11.1.1112.3
10.3.1064.2
11.1.1112.1
10.3.1064.1
11.1.1111.3
11.1.1111.2
11.1.1111.1
11.1.1112.0
10.3.1064.0
11.1.1111.5
10.3.1063.2
11.1.1111.4
11.1.1111.0
10.3.1063.1
10.3.1060.0 SP3
11.1.1110.0
10.3.1060.0 SP2
10.3.1060.0 SP1
10.2.1040.0 SP3
10.3.1060.0
10.3.1050.0 SP1
10.2.1040.0 SP2
10.3.1050.0
10.1.1020.0 SP3
10.2.1040.0 SP1
10.1.1020.0 SP2
10.1.1020.0
10.2.1040.0
10.2.1030.0 SP1
10.2.1030.0
10.1.1020.0 SP1
9.2.950.0 SP3
Vulnerabilities (204)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU64079 - Missing release of memory after effective lifetime CVE-2022-1012 |
CWE-401 | Medium | 9.2.950.0 SP3, 10.1.1020.0 SP1 | 08.06.2022 |
SB2022060827 SB2022061417 SB2022062437 and 75 more |
||
| #VU59057 - Server-Side Request Forgery (SSRF) CVE-2021-44224 |
CWE-918 | Medium | 9.2.950.0 SP3, 10.1.1020.0 SP1 | 20.12.2021 |
SB2021122005 SB2021122021 SB2021122709 and 33 more |
||
| #VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33193 |
CWE-444 | Medium | 9.2.950.0 SP3, 10.1.1020.0 SP1 | 13.09.2021 |
SB2021091317 SB2021091707 SB2021092301 and 24 more |
||
| #VU53778 - NULL Pointer Dereference CVE-2020-13950 |
CWE-476 | Medium | 9.2.950.0 SP3, 10.1.1020.0 SP1 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 15 more |
Showing elements 201 - 220 out of 204