Known vulnerabilities in IBM Power Hardware Management Console (HMC) - page 5
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:hmc:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
185
Public exploits:
21
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.3.1064.1
11.1.1111.3
11.1.1111.2
11.1.1111.1
11.1.1112.0
10.3.1064.0
11.1.1111.5
10.3.1063.2
11.1.1111.4
11.1.1111.0
10.3.1063.1
10.3.1060.0 SP3
11.1.1110.0
10.3.1060.0 SP2
10.3.1060.0 SP1
10.2.1040.0 SP3
10.3.1060.0
10.3.1050.0 SP1
10.2.1040.0 SP2
10.3.1050.0
10.1.1020.0 SP3
10.2.1040.0 SP1
10.1.1020.0 SP2
10.1.1020.0
10.2.1040.0
10.2.1030.0 SP1
10.2.1030.0
10.1.1020.0 SP1
9.2.950.0 SP3
Vulnerabilities (185)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU101344 - Integer overflow CVE-2024-10917 |
CWE-190 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 09.12.2024 |
SB2024120927 SB2024120928 SB2024120929 and 66 more |
||
| #VU100591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-52318 |
CWE-79 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 18.11.2024 |
SB2024111830 SB2024112250 SB2024112251 and 17 more |
||
| #VU100587 - Resource Management Errors CVE-2024-52317 |
CWE-399 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 18.11.2024 |
SB2024111823 SB2024112550 SB2024121231 and 27 more |
||
| #VU99614 - Improper input validation CVE-2024-50602 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.11.2024 |
SB2024110155 SB2024110182 SB2024110534 and 98 more |
||
| #VU98647 - Improper input validation CVE-2024-21208 |
CWE-20 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 139 more |
||
| #VU98648 - Improper input validation CVE-2024-21217 |
CWE-20 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 142 more |
||
| #VU97951 - Incomplete cleanup CVE-2023-31356 |
CWE-459 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 02.10.2024 |
SB2024100225 SB2024100226 SB2024100227 and 19 more |
||
| #VU97689 - CVE-2024-6531 |
Medium | 10.3.1060.0 SP1 | 25.09.2024 |
SB2024092513 SB2024121139 SB2025031910 and 7 more |
|||
| #VU94556 - Improper input validation CVE-2024-21145 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 130 more |
||
| #VU94559 - Improper input validation CVE-2024-21131 |
CWE-20 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 135 more |
||
| #VU93866 - Memory corruption CVE-2024-5564 |
CWE-119 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 08.07.2024 |
SB2024070875 SB2024070878 SB2024070880 and 25 more |
||
| #VU93540 - Improper input validation CVE-2024-38473 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 47 more |
||
| #VU93519 - Out-of-bounds read CVE-2024-37371 |
CWE-125 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070148 SB2024070491 SB2024070496 and 114 more |
||
| #VU93518 - Improper input validation CVE-2024-37370 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070148 SB2024070491 SB2024070496 and 96 more |
||
| #VU93424 - Out-of-bounds read CVE-2024-5535 |
CWE-125 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 27.06.2024 |
SB2024062720 SB20240717135 SB2024072154 and 154 more |
||
| #VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-38709 |
CWE-113 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 62 more |
||
| #VU84028 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior CVE-2023-20592 |
CWE-758 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 08.12.2023 |
SB2023120815 SB2023120817 SB2023120818 and 24 more |
||
| #VU82245 - Resource Management Errors CVE-2023-45802 |
CWE-399 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102104 and 36 more |
||
| #VU79525 - Protection Mechanism Failure CVE-2022-46329 |
CWE-693 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 15.08.2023 |
SB2023081532 SB2023092004 SB2023092005 and 18 more |
||
| #VU19178 - Out-of-bounds write CVE-2019-12900 |
CWE-787 | High | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 15.07.2019 |
SB2019071503 SB2019072101 SB2019080907 and 85 more |
Showing elements 81 - 100 out of 185