Known vulnerabilities in IBM DS8000 Hardware Management Console
Vendor:
IBM Corporation
Software:
IBM DS8000 Hardware Management Console
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_ds8000_hardware_management_console:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
46
Public exploits:
10
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (46)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU109938 - Exposure of sensitive information to an unauthorized actor CVE-2025-46421 |
CWE-200 | Low | 10.10.106.0 R10.1 | 29.05.2025 |
SB2025052715 SB20250529101 SB20250529102 and 26 more |
||
| #VU109937 - Missing release of memory after effective lifetime CVE-2025-46420 |
CWE-401 | Low | 10.10.106.0 R10.1 | 29.05.2025 |
SB2025052992 SB20250529101 SB20250529102 and 29 more |
||
| #VU109936 - Use After Free CVE-2025-32911 |
CWE-416 | High | 10.10.106.0 R10.1 | 29.05.2025 |
SB2025052992 SB2025052997 SB2025052998 and 33 more |
||
| #VU109931 - Buffer over-read CVE-2025-32050 |
CWE-126 | Medium | 10.10.106.0 R10.1 | 29.05.2025 |
SB2024111329 SB2025052980 SB2025052994 and 28 more |
||
| #VU109929 - Buffer over-read CVE-2025-32052 |
CWE-126 | Medium | 10.10.106.0 R10.1 | 29.05.2025 |
SB2024111329 SB2025052980 SB2025052994 and 32 more |
||
| #VU109927 - Buffer over-read CVE-2025-32053 |
CWE-126 | Medium | 10.10.106.0 R10.1 | 29.05.2025 |
SB2024111329 SB2025052980 SB2025052994 and 29 more |
||
| #VU109838 - NULL Pointer Dereference CVE-2025-32913 |
CWE-476 | High | 10.10.106.0 R10.1 | 27.05.2025 |
SB2025052718 SB2025052723 SB2025052997 and 33 more |
||
| #VU109834 - Out-of-bounds read CVE-2025-32906 |
CWE-125 | Medium | 10.10.106.0 R10.1 | 27.05.2025 |
SB2025052715 SB2025052723 SB2025052994 and 37 more |
||
| #VU105723 - Stack-based buffer overflow CVE-2024-8176 |
CWE-121 | High | 10.10.106.0 R10.1 | 14.03.2025 |
SB2025031426 SB2025031429 SB2025031430 and 105 more |
||
| #VU105715 - Out-of-bounds write CVE-2025-27363 |
CWE-787 | Critical | 10.10.106.0 R10.1 | 14.03.2025 |
SB2025031402 SB2025031502 SB2025031750 and 97 more |
||
| #VU104099 - Use After Free CVE-2024-56171 |
CWE-416 | High | 10.10.106.0 R10.1 | 20.02.2025 |
SB2025022003 SB2025022010 SB2025022023 and 111 more |
||
| #VU104098 - Stack-based buffer overflow CVE-2025-24928 |
CWE-121 | High | 10.10.106.0 R10.1 | 20.02.2025 |
SB2025022003 SB2025022010 SB2025022023 and 111 more |
||
| #VU93519 - Out-of-bounds read CVE-2024-37371 |
CWE-125 | Medium | 10.10.106.0 R10.1 | 01.07.2024 |
SB2024070148 SB2024070491 SB2024070496 and 114 more |
||
| #VU93518 - Improper input validation CVE-2024-37370 |
CWE-20 | Medium | 10.10.106.0 R10.1 | 01.07.2024 |
SB2024070148 SB2024070491 SB2024070496 and 96 more |
||
| #VU68829 - Resource Management Errors CVE-2022-40304 |
CWE-399 | Medium | 89.33.34.0 | 30.10.2022 |
SB2022103005 SB2022103006 SB2022103007 and 90 more |
||
| #VU68828 - Integer overflow CVE-2022-40303 |
CWE-190 | High | 89.33.34.0 | 30.10.2022 |
SB2022103005 SB2022103006 SB2022103007 and 88 more |
||
| #VU68718 - Use After Free CVE-2022-43680 |
CWE-416 | Medium | 89.33.34.0 | 25.10.2022 |
SB2022102560 SB2022102566 SB2022103010 and 99 more |
||
| #VU67970 - Out-of-bounds read CVE-2022-42011 |
CWE-125 | Low | 89.33.34.0 | 06.10.2022 |
SB2022100645 SB2022100708 SB2022102733 and 57 more |
||
| #VU67969 - Reachable Assertion CVE-2022-42010 |
CWE-617 | Low | 89.33.34.0 | 06.10.2022 |
SB2022100645 SB2022100708 SB2022102733 and 58 more |
||
| #VU9687 - Memory corruption CVE-2017-9047 |
CWE-119 | Low | 10.10.106.0 R10.1 | 19.12.2017 |
SB2017121308 SB2017111019 SB2022110928 and 29 more |
Showing elements 1 - 20 out of 46