Known vulnerabilities in IBM Power Hardware Management Console (HMC) - page 6
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:hmc:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
185
Public exploits:
21
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.3.1064.1
11.1.1111.3
11.1.1111.2
11.1.1111.1
11.1.1112.0
10.3.1064.0
11.1.1111.5
10.3.1063.2
11.1.1111.4
11.1.1111.0
10.3.1063.1
10.3.1060.0 SP3
11.1.1110.0
10.3.1060.0 SP2
10.3.1060.0 SP1
10.2.1040.0 SP3
10.3.1060.0
10.3.1050.0 SP1
10.2.1040.0 SP2
10.3.1050.0
10.1.1020.0 SP3
10.2.1040.0 SP1
10.1.1020.0 SP2
10.1.1020.0
10.2.1040.0
10.2.1030.0 SP1
10.2.1030.0
10.1.1020.0 SP1
9.2.950.0 SP3
Vulnerabilities (185)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU94741 - Improper Initialization CVE-2023-31346 |
CWE-665 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 25.07.2024 |
SB2024072522 SB2024072524 SB2024072525 and 10 more |
||
| #VU93732 - Resource Management Errors CVE-2024-34750 |
CWE-399 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 03.07.2024 |
SB2024070346 SB20240711245 SB2024071542 and 56 more |
||
| #VU93545 - Server-Side Request Forgery (SSRF) CVE-2024-39573 |
CWE-918 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 46 more |
||
| #VU93544 - Improper input validation CVE-2024-38477 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 58 more |
||
| #VU93542 - Improper input validation CVE-2024-38475 |
CWE-20 | Critical | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 54 more |
||
| #VU93541 - Improper input validation CVE-2024-38474 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 57 more |
||
| #VU88533 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-32487 |
CWE-78 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 15.04.2024 |
SB2024041531 SB2024041533 SB2024042949 and 63 more |
||
| #VU88153 - Resource exhaustion CVE-2024-27316 |
CWE-400 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1060.0 | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040545 and 51 more |
||
| #VU88144 - Improper input validation CVE-2024-28182 |
CWE-20 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 04.04.2024 |
SB2024040442 SB2024040443 SB2024040444 and 124 more |
||
| #VU86241 - NULL Pointer Dereference CVE-2023-40546 |
CWE-476 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 07.02.2024 |
SB2024020767 SB20231110100 SB20231110101 and 23 more |
||
| #VU86236 - Insufficient Verification of Data Authenticity CVE-2023-40547 |
CWE-345 | High | 10.2.1040.0 SP2, 10.3.1060.0 | 07.02.2024 |
SB2024020767 SB20240312192 SB20240312193 and 27 more |
||
| #VU86052 - Use After Free CVE-2024-25062 |
CWE-416 | High | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 05.02.2024 |
SB2024020507 SB2024020508 SB2024020742 and 115 more |
||
| #VU84540 - Unchecked Return Value CVE-2023-6918 |
CWE-252 | Low | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 19.12.2023 |
SB2023121906 SB2023121910 SB2023121911 and 63 more |
||
| #VU84538 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-6004 |
CWE-78 | Medium | 10.2.1040.0 SP3, 10.3.1060.0 SP1 | 19.12.2023 |
SB2023121905 SB2023121906 SB2023121910 and 58 more |
||
| #VU82894 - Resource Management Errors CVE-2023-5678 |
CWE-399 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 07.11.2023 |
SB20231107122 SB2023112047 SB2023112048 and 147 more |
||
| #VU80801 - Exposure of sensitive information to an unauthorized actor CVE-2023-4641 |
CWE-200 | Low | 10.2.1040.0 SP2, 10.3.1060.0 | 14.09.2023 |
SB2023091453 SB2023091455 SB2023101019 and 66 more |
||
| #VU78798 - Resource Management Errors CVE-2023-3817 |
CWE-399 | Low | 10.2.1040.0 SP2, 10.3.1060.0 | 31.07.2023 |
SB2023073153 SB2023080268 SB2023080438 and 158 more |
||
| #VU78463 - Resource Management Errors CVE-2023-3446 |
CWE-399 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 20.07.2023 |
SB2023072079 SB2023072524 SB2023072525 and 152 more |
||
| #VU71529 - Resource exhaustion CVE-2022-3094 |
CWE-400 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 25.01.2023 |
SB2023012556 SB2023012559 SB2023012602 and 46 more |
||
| #VU71458 - Memory corruption CVE-2023-22745 |
CWE-119 | High | 10.2.1040.0 SP2, 10.3.1060.0 | 24.01.2023 |
SB2023012404 SB2023022749 SB2023030333 and 42 more |
Showing elements 101 - 120 out of 185