Known vulnerabilities in IBM Power Hardware Management Console (HMC) - page 4
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:hmc:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
204
Public exploits:
22
Known exploited (KEV):
4
Breakdown by Severity Chart
11.2.1120.1
11.1.1112.3
10.3.1064.2
11.1.1112.1
10.3.1064.1
11.1.1111.3
11.1.1111.2
11.1.1111.1
11.1.1112.0
10.3.1064.0
11.1.1111.5
10.3.1063.2
11.1.1111.4
11.1.1111.0
10.3.1063.1
10.3.1060.0 SP3
11.1.1110.0
10.3.1060.0 SP2
10.3.1060.0 SP1
10.2.1040.0 SP3
10.3.1060.0
10.3.1050.0 SP1
10.2.1040.0 SP2
10.3.1050.0
10.1.1020.0 SP3
10.2.1040.0 SP1
10.1.1020.0 SP2
10.1.1020.0
10.2.1040.0
10.2.1030.0 SP1
10.2.1030.0
10.1.1020.0 SP1
9.2.950.0 SP3
Vulnerabilities (204)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114769 - Improper Link Resolution Before File Access ('Link Following') CVE-2025-8941 |
CWE-59 | Low | 10.3.1060.0 SP3, 11.1.1110.0 | 03.09.2025 |
SB2025090350 SB2025090372 SB2025090373 and 20 more |
||
| #VU112067 - Protection Mechanism Failure CVE-2025-32462 |
CWE-693 | Low | 10.3.1060.0 SP2, 11.1.1110.0 | 01.07.2025 |
SB2025070109 SB2025070111 SB2025070112 and 42 more |
||
| #VU111389 - Improper Access Control CVE-2025-6020 |
CWE-284 | Low | 10.3.1060.0 SP2, 11.1.1110.0 | 19.06.2025 |
SB2025061987 SB2025061992 SB20250619103 and 69 more |
||
| #VU111225 - Integer overflow CVE-2025-6021 |
CWE-190 | High | 10.3.1060.0 SP2, 11.1.1110.0 | 17.06.2025 |
SB2025061921 SB2025062408 SB2025062747 and 64 more |
||
| #VU111223 - Type confusion CVE-2025-49796 |
CWE-843 | Medium | 10.3.1060.0 SP2, 11.1.1110.0 | 17.06.2025 |
SB2025061728 SB2025070832 SB20250709112 and 86 more |
||
| #VU111221 - Use After Free CVE-2025-49794 |
CWE-416 | Medium | 10.3.1060.0 SP2, 11.1.1110.0 | 17.06.2025 |
SB2025061728 SB2025070832 SB20250709112 and 67 more |
||
| #VU109945 - Integer underflow CVE-2025-4948 |
CWE-191 | Low | 10.3.1060.0 SP2, 11.1.1110.0 | 29.05.2025 |
SB2025052993 SB20250529113 SB20250529114 and 36 more |
||
| #VU109942 - Out-of-bounds read CVE-2025-32914 |
CWE-125 | Medium | 10.3.1060.0 SP2, 11.1.1110.0 | 29.05.2025 |
SB2025052993 SB20250529101 SB20250529113 and 30 more |
||
| #VU109940 - Resource exhaustion CVE-2025-32049 |
CWE-400 | Medium | 10.3.1060.0 SP2, 11.1.1110.0 | 29.05.2025 |
SB2025052993 SB20250529113 SB20250529114 and 22 more |
||
| #VU109931 - Buffer over-read CVE-2025-32050 |
CWE-126 | Medium | 10.3.1060.0 SP2 | 29.05.2025 |
SB2024111329 SB2025052980 SB2025052994 and 29 more |
||
| #VU109929 - Buffer over-read CVE-2025-32052 |
CWE-126 | Medium | 10.3.1060.0 SP2 | 29.05.2025 |
SB2024111329 SB2025052980 SB2025052994 and 33 more |
||
| #VU109927 - Buffer over-read CVE-2025-32053 |
CWE-126 | Medium | 10.3.1060.0 SP2 | 29.05.2025 |
SB2024111329 SB2025052980 SB2025052994 and 30 more |
||
| #VU109926 - Buffer over-read CVE-2025-2784 |
CWE-126 | Medium | 10.3.1060.0 SP2, 11.1.1110.0 | 29.05.2025 |
SB2025052715 SB2025052980 SB20250529113 and 30 more |
||
| #VU109848 - Integer overflow CVE-2025-4373 |
CWE-190 | High | 10.3.1060.0 SP2, 11.1.1110.0 | 27.05.2025 |
SB2025052742 SB2025052946 SB2025060610 and 42 more |
||
| #VU107996 - Error Handling CVE-2025-31650 |
CWE-388 | Medium | 10.3.1060.0 SP3, 11.1.1110.0 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 38 more |
||
| #VU107995 - Improper input validation CVE-2025-31651 |
CWE-20 | Medium | 10.3.1060.0 SP3, 11.1.1110.0 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 46 more |
||
| #VU107596 - Heap-based Buffer Overflow CVE-2025-32415 |
CWE-122 | High | 10.3.1060.0 SP3, 11.1.1110.0 | 17.04.2025 |
SB2025041758 SB2025041880 SB2025042531 and 56 more |
||
| #VU107595 - Out-of-bounds read CVE-2025-32414 |
CWE-125 | Medium | 10.3.1060.0 SP2, 11.1.1110.0 | 17.04.2025 |
SB2025041758 SB2025041850 SB2025041880 and 56 more |
||
| #VU100566 - Off-by-one Error CVE-2024-52533 |
CWE-193 | High | 10.3.1060.0 SP2, 11.1.1110.0 | 15.11.2024 |
SB20241115147 SB20241115148 SB20241115149 and 71 more |
||
| #VU81168 - Out-of-bounds read CVE-2023-40403 |
CWE-125 | Low | 10.3.1060.0 SP2, 11.1.1110.0 | 26.09.2023 |
SB2023092664 SB2023092707 SB2023092143 and 23 more |
Showing elements 61 - 80 out of 204