Known vulnerabilities in IBM Virtualization Engine TS7700 3948-VED
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_virtualization_engine_ts7700_3948-ved:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
60
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
8.61.0.60 VTD_EXEC.906
8.60.0.116 VTD_EXEC.905
8.61.0.60 VTD_EXEC.269
8.61.0.60 VTD_EXEC.407
8.54.2.17 VTD_EXEC.347
8.54.1.27 VTD_EXEC.347
8.60.0.115 VTD_EXEC.347
8.54.2.17 VTD_EXEC.393
8.54.1.27 VTD_EXEC.393
8.60.0.115 VTD_EXEC.393
8.54.2.17 VTD_EXEC.269
8.54.1.27 VTD_EXEC.269
8.60.0.115 VTD_EXEC.269
8.54.2.17 VTD_EXEC.407
8.54.1.27 VTD_EXEC.407
8.60.0.115 VTD_EXEC.407
8.61.0.60
8.54.2.17 VTD_EXEC.904
8.60.0.115 VTD_EXEC.905
8.60.0.115 VTD_EXEC.279
8.54.2.17
8.60.0.115
8.54.1.27 VTD_EXEC.405
8.54.0.68 VTD_EXEC.405
8.53.1.21 VTD_EXEC.405
8.54.1.27 VTD_EXEC.904
8.54.0.68
8.54.1.27 VTD_EXEC.279
8.54.0.68 VTD_EXEC.279
8.54.1.27
8.53.1.21
8.54.0.68 VTD_EXEC.269
8.53.1.21 VTD_EXEC.903
8.53.0.63 VTD_EXEC.269
8.53.1.21 VTD_EXEC.279
8.53.1.21 VTD_EXEC.269
8.53.0.63 VTD_EXEC.903
8.53.0.63 VTD_EXEC.279
8.53.0.63 + VTD_EXEC.269
8.53.0.63
Vulnerabilities (60)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU143697 - Use After Free CVE-2026-64718 |
CWE-416 | Medium | 8.60.0.115 VTD_EXEC.905, 8.60.0.116 VTD_EXEC.905, 8.61.0.60 VTD_EXEC.906 | 17.08.2026 |
SB2026081770 SB2026081771 SB2026081772 and 10 more |
||
| #VU123309 - Resource exhaustion CVE-2026-18401 |
CWE-400 | Medium | 8.60.0.115 VTD_EXEC.905, 8.60.0.116 VTD_EXEC.905, 8.61.0.60 VTD_EXEC.906 | 27.02.2026 |
SB2026022701 SB2026090989 SB2026091108 |
||
| #VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-64718 |
CWE-1321 | Medium | 8.60.0.115 VTD_EXEC.905, 8.60.0.116 VTD_EXEC.905, 8.61.0.60 VTD_EXEC.906 | 19.01.2026 |
SB2026011995 SB2026011999 SB20260119100 and 27 more |
||
| #VU117483 - Improper input validation CVE-2025-53066 |
CWE-20 | Medium | 8.54.1.27 VTD_EXEC.269, 8.54.2.17 VTD_EXEC.269, 8.60.0.115 VTD_EXEC.269, 8.61.0.60 VTD_EXEC.269 | 22.10.2025 |
SB20251022107 SB20251022108 SB20251022109 and 118 more |
||
| #VU117484 - Improper input validation CVE-2025-53057 |
CWE-20 | Medium | 8.54.1.27 VTD_EXEC.269, 8.54.2.17 VTD_EXEC.269, 8.60.0.115 VTD_EXEC.269, 8.61.0.60 VTD_EXEC.269 | 22.10.2025 |
SB20251022107 SB20251022108 SB20251022109 and 121 more |
||
| #VU114005 - Incorrect Authorization CVE-2025-36120 |
CWE-863 | Medium | 8.54.1.27 VTD_EXEC.347, 8.54.2.17 VTD_EXEC.347, 8.60.0.115 VTD_EXEC.347, 8.61.0.60 | 13.08.2025 |
SB2025081353 SB2025102827 |
||
| #VU113739 - Resource Management Errors CVE-2025-6069 |
CWE-399 | Medium | 8.54.1.27 VTD_EXEC.407, 8.54.2.17 VTD_EXEC.407, 8.60.0.115 VTD_EXEC.407, 8.61.0.60 VTD_EXEC.407 | 07.08.2025 |
SB2025080731 SB2025080736 SB2025080737 and 40 more |
||
| #VU112132 - Stack-based buffer overflow CVE-2025-4447 |
CWE-121 | Medium | 8.54.1.27 VTD_EXEC.269, 8.54.2.17 VTD_EXEC.269, 8.60.0.115 VTD_EXEC.269, 8.61.0.60 | 03.07.2025 |
SB2025070315 SB2025070316 SB2025070319 and 54 more |
||
| #VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-47273 |
CWE-22 | High | 8.54.1.27 VTD_EXEC.407, 8.54.2.17 VTD_EXEC.407, 8.60.0.115 VTD_EXEC.407, 8.61.0.60 | 27.05.2025 |
SB2025052721 SB2025052734 SB2025052736 and 112 more |
||
| #VU107949 - Improper input validation CVE-2025-1795 |
CWE-20 | Low | 8.54.1.27 VTD_EXEC.407, 8.54.2.17 VTD_EXEC.407, 8.60.0.115 VTD_EXEC.407, 8.61.0.60 | 25.04.2025 |
SB2025042512 SB2025042513 SB2025042523 and 13 more |
||
| #VU107520 - Improper input validation CVE-2025-21587 |
CWE-20 | Medium | 8.54.1.27 VTD_EXEC.269, 8.54.2.17 VTD_EXEC.269, 8.60.0.115 VTD_EXEC.269, 8.61.0.60 | 16.04.2025 |
SB20250416145 SB20250416146 SB20250416147 and 103 more |
||
| #VU107521 - Improper input validation CVE-2025-30698 |
CWE-20 | Medium | 8.54.1.27 VTD_EXEC.269, 8.54.2.17 VTD_EXEC.269, 8.60.0.115 VTD_EXEC.269, 8.61.0.60 | 16.04.2025 |
SB20250416145 SB20250416146 SB20250416147 and 93 more |
||
| #VU105112 - Resource exhaustion CVE-2025-23184 |
CWE-400 | Medium | 8.54.1.27 VTD_EXEC.904, 8.54.2.17 VTD_EXEC.904, 8.60.0.115 VTD_EXEC.905 | 28.02.2025 |
SB2025022807 SB2025030340 SB2025041017 and 40 more |
||
| #VU104121 - Information Exposure Through Log Files CVE-2024-40679 |
CWE-532 | Low | 8.54.1.27 VTD_EXEC.393, 8.54.2.17 VTD_EXEC.393, 8.60.0.115 VTD_EXEC.393, 8.61.0.60 | 21.02.2025 |
SB2025022116 SB2025022521 SB2025031921 and 7 more |
||
| #VU103812 - Improper input validation CVE-2025-0938 |
CWE-20 | Low | 8.54.1.27 VTD_EXEC.407, 8.54.2.17 VTD_EXEC.407, 8.60.0.115 VTD_EXEC.407, 8.61.0.60 | 11.02.2025 |
SB20250211115 SB20250211130 SB20250211131 and 77 more |
||
| #VU96945 - Resource exhaustion CVE-2024-7592 |
CWE-400 | Medium | 8.54.2.17, 8.60.0.115 | 09.09.2024 |
SB2024090916 SB2024090917 SB2024090918 and 72 more |
||
| #VU96744 - Type confusion CVE-2024-6119 |
CWE-843 | Medium | 8.54.1.27 VTD_EXEC.279, 8.54.2.17, 8.60.0.115 VTD_EXEC.279 | 03.09.2024 |
SB2024090364 SB2024090365 SB2024090384 and 99 more |
||
| #VU96596 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-8088 |
CWE-835 | Medium | 8.54.2.17, 8.60.0.115 | 28.08.2024 |
SB2024082860 SB2024082861 SB2024082862 and 82 more |
||
| #VU96058 - Exposure of sensitive information to an unauthorized actor CVE-2023-50314 |
CWE-200 | Low | 8.54.2.17, 8.60.0.115 | 15.08.2024 |
SB2024081566 SB2024091324 SB2024091814 and 44 more |
||
| #VU87685 - Resource exhaustion CVE-2024-0450 |
CWE-400 | Medium | 8.54.2.17, 8.60.0.115 | 21.03.2024 |
SB2024032107 SB2024032110 SB2024040848 and 80 more |
Showing elements 1 - 20 out of 60