Known vulnerabilities in IBM Power Hardware Management Console (HMC) - page 6
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:hmc:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
202
Public exploits:
22
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
11.1.1112.1
10.3.1064.1
11.1.1111.3
11.1.1111.2
11.1.1111.1
11.1.1112.0
10.3.1064.0
11.1.1111.5
10.3.1063.2
11.1.1111.4
11.1.1111.0
10.3.1063.1
10.3.1060.0 SP3
11.1.1110.0
10.3.1060.0 SP2
10.3.1060.0 SP1
10.2.1040.0 SP3
10.3.1060.0
10.3.1050.0 SP1
10.2.1040.0 SP2
10.3.1050.0
10.1.1020.0 SP3
10.2.1040.0 SP1
10.1.1020.0 SP2
10.1.1020.0
10.2.1040.0
10.2.1030.0 SP1
10.2.1030.0
10.1.1020.0 SP1
9.2.950.0 SP3
Vulnerabilities (202)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU101344 - Integer overflow CVE-2024-10917 |
CWE-190 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 09.12.2024 |
SB2024120927 SB2024120928 SB2024120929 and 66 more |
||
| #VU100591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-52318 |
CWE-79 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 18.11.2024 |
SB2024111830 SB2024112250 SB2024112251 and 17 more |
||
| #VU100587 - Resource Management Errors CVE-2024-52317 |
CWE-399 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 18.11.2024 |
SB2024111823 SB2024112550 SB2024121231 and 27 more |
||
| #VU99614 - Improper input validation CVE-2024-50602 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.11.2024 |
SB2024110155 SB2024110182 SB2024110534 and 98 more |
||
| #VU98647 - Improper input validation CVE-2024-21208 |
CWE-20 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 139 more |
||
| #VU98648 - Improper input validation CVE-2024-21217 |
CWE-20 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 142 more |
||
| #VU97689 - CVE-2024-6531 |
Medium | 10.3.1060.0 SP1 | 25.09.2024 |
SB2024092513 SB2024121139 SB2025031910 and 7 more |
|||
| #VU94556 - Improper input validation CVE-2024-21145 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 130 more |
||
| #VU94559 - Improper input validation CVE-2024-21131 |
CWE-20 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 135 more |
||
| #VU93866 - Memory corruption CVE-2024-5564 |
CWE-119 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 08.07.2024 |
SB2024070875 SB2024070878 SB2024070880 and 25 more |
||
| #VU93545 - Server-Side Request Forgery (SSRF) CVE-2024-39573 |
CWE-918 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 46 more |
||
| #VU93544 - Improper input validation CVE-2024-38477 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 58 more |
||
| #VU93541 - Improper input validation CVE-2024-38474 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 57 more |
||
| #VU93540 - Improper input validation CVE-2024-38473 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 47 more |
||
| #VU93519 - Out-of-bounds read CVE-2024-37371 |
CWE-125 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070148 SB2024070491 SB2024070496 and 114 more |
||
| #VU93518 - Improper input validation CVE-2024-37370 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070148 SB2024070491 SB2024070496 and 96 more |
||
| #VU93424 - Out-of-bounds read CVE-2024-5535 |
CWE-125 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 27.06.2024 |
SB2024062720 SB20240717135 SB2024072154 and 157 more |
||
| #VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-38709 |
CWE-113 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 64 more |
||
| #VU82245 - Resource Management Errors CVE-2023-45802 |
CWE-399 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102104 and 37 more |
||
| #VU19178 - Out-of-bounds write CVE-2019-12900 |
CWE-787 | High | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 15.07.2019 |
SB2019071503 SB2019072101 SB2019080907 and 85 more |
Showing elements 101 - 120 out of 202