Known vulnerabilities in IBM Power Hardware Management Console (HMC) - page 7
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:hmc:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
185
Public exploits:
21
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.3.1064.1
11.1.1111.3
11.1.1111.2
11.1.1111.1
11.1.1112.0
10.3.1064.0
11.1.1111.5
10.3.1063.2
11.1.1111.4
11.1.1111.0
10.3.1063.1
10.3.1060.0 SP3
11.1.1110.0
10.3.1060.0 SP2
10.3.1060.0 SP1
10.2.1040.0 SP3
10.3.1060.0
10.3.1050.0 SP1
10.2.1040.0 SP2
10.3.1050.0
10.1.1020.0 SP3
10.2.1040.0 SP1
10.1.1020.0 SP2
10.1.1020.0
10.2.1040.0
10.2.1030.0 SP1
10.2.1030.0
10.1.1020.0 SP1
9.2.950.0 SP3
Vulnerabilities (185)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU87510 - Improper input validation CVE-2024-24549 |
CWE-20 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 13.03.2024 |
SB2024031386 SB2024031879 SB2024031880 and 64 more |
||
| #VU87509 - Resource exhaustion CVE-2024-23672 |
CWE-400 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 13.03.2024 |
SB2024031386 SB2024032821 SB2024032824 and 49 more |
||
| #VU86885 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-48624 |
CWE-78 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 28.02.2024 |
SB2024022820 SB2024022839 SB2024030503 and 60 more |
||
| #VU86240 - Out-of-bounds read CVE-2023-40551 |
CWE-125 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 07.02.2024 |
SB2024020767 SB20240312192 SB20240312193 and 26 more |
||
| #VU86239 - Out-of-bounds read CVE-2023-40550 |
CWE-125 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 07.02.2024 |
SB2024020767 SB20240312193 SB20240312194 and 24 more |
||
| #VU86238 - Out-of-bounds read CVE-2023-40549 |
CWE-125 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 07.02.2024 |
SB2024020767 SB20240312193 SB20240312194 and 24 more |
||
| #VU86237 - Integer overflow CVE-2023-40548 |
CWE-190 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 07.02.2024 |
SB2024020767 SB20240312193 SB20240312194 and 23 more |
||
| #VU86230 - Resource exhaustion CVE-2023-52425 |
CWE-400 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 118 more |
||
| #VU85468 - Improper input validation CVE-2024-20918 |
CWE-20 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 192 more |
||
| #VU85469 - Improper input validation CVE-2024-20952 |
CWE-20 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 189 more |
||
| #VU85471 - Improper input validation CVE-2024-20921 |
CWE-20 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 185 more |
||
| #VU85472 - Improper input validation CVE-2024-20926 |
CWE-20 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 164 more |
||
| #VU85473 - Improper input validation CVE-2024-20945 |
CWE-20 | Low | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 177 more |
||
| #VU85267 - Covert Timing Channel CVE-2023-5388 |
CWE-385 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 10.01.2024 |
SB2024011031 SB2024011042 SB2024011043 and 96 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU82583 - Observable discrepancy CVE-2023-33850 |
CWE-203 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 31.10.2023 |
SB2023103131 SB2023111305 SB2023111407 and 106 more |
||
| #VU81044 - Out-of-bounds read CVE-2023-39615 |
CWE-125 | Medium | 10.2.1040.0 SP2, 10.3.1060.0 | 21.09.2023 |
SB2023092155 SB2023092202 SB2023092203 and 61 more |
||
| #VU75741 - Improper input validation CVE-2023-1667 |
CWE-20 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 04.05.2023 |
SB2023050456 SB2023050501 SB2023052441 and 75 more |
||
| #VU74863 - NULL Pointer Dereference CVE-2023-28484 |
CWE-476 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 11.04.2023 |
SB2023041144 SB2023041145 SB2023041939 and 87 more |
||
| #VU74862 - Resource Management Errors CVE-2023-29469 |
CWE-399 | Medium | 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1 | 11.04.2023 |
SB2023041144 SB2023041145 SB2023041939 and 84 more |
Showing elements 121 - 140 out of 185