Known vulnerabilities in PowerVC

Vendor: IBM Corporation
Software: PowerVC
Software CPE: cpe:2.3:a:ibm_corporation:powervc:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 112
Public exploits: 8
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerVC PowerVC is affected by 112 known vulnerabilities: 1 critical, 16 high, 73 medium, 22 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146459 - Uncontrolled Recursion
CVE-2026-59645		 CWE-674 Medium
No
No
 - 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 6 more
#VU141317 - Improper Validation of Certificate with Host Mismatch
CVE-2026-62243		 CWE-297 Medium
No
No
 - 08.08.2026 SB2026080807
SB2026091654
SB20260921141
and 1 more
#VU139181 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-53669		 CWE-601 Low
No
No
 - 22.07.2026 SB2026072295
SB2026100265
SB2026100935
#VU139180 - Improper input validation
CVE-2026-53666		 CWE-20 Medium
No
No
 - 22.07.2026 SB2026072295
SB2026100265
SB2026100935
#VU139151 - Incorrect Authorization
CVE-2026-59889		 CWE-863 Low
No
No
 - 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 10 more
#VU137249 - Allocation of Resources Without Limits or Throttling
CVE-2026-67230		 CWE-770 Medium
No
No
 - 09.07.2026 SB2026070934
SB2026100834
#VU136867 - Resource exhaustion
CVE-2026-59869		 CWE-400 Medium
No
No
 - 03.07.2026 SB2026070344
SB20260731138
SB2026083174
and 7 more
#VU136864 - Inefficient Algorithmic Complexity
CVE-2026-53550		 CWE-407 Medium
No
No
 - 03.07.2026 SB2026070344
SB2026090115
SB2026092419
and 1 more
#VU136823 - Improper Validation of Specified Quantity in Input
CVE-2026-55952		 CWE-1284 Medium
No
No
 - 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 9 more
#VU134929 - Improper input validation
CVE-2025-68470		 CWE-20 Low
No
No
 - 19.06.2026 SB2026061981
SB2026071420
SB2026100265
and 1 more
#VU133099 - Allocation of Resources Without Limits or Throttling
CVE-2026-44488		 CWE-770 Medium
No
No
 - 31.05.2026 SB2026052927
SB2026061992
SB2026070157
and 17 more
#VU133098 - Insertion of Sensitive Information Into Sent Data
CVE-2026-44487		 CWE-201 Low
No
No
 - 31.05.2026 SB2026052927
SB2026061992
SB2026070157
and 17 more
#VU133097 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44486		 CWE-200 Medium
No
No
 - 31.05.2026 SB2026052927
SB2026061992
SB2026070157
and 15 more
#VU133096 - Inefficient Regular Expression Complexity
CVE-2026-44496		 CWE-1333 Medium
No
No
 - 31.05.2026 SB2026052927
SB2026061992
SB2026070157
and 14 more
#VU132756 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44490		 CWE-1321 Medium
Available
No
 - 29.05.2026 SB2026052927
SB2026071542
SB2026072613
and 10 more
#VU132755 - Server-Side Request Forgery (SSRF)
CVE-2026-44492		 CWE-918 Medium
Available
No
 - 29.05.2026 SB2026052927
SB2026061992
SB2026070157
and 15 more
#VU132751 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44489		 CWE-1321 Low
Available
No
 - 29.05.2026 SB2026052927
SB2026072719
SB2026091111
and 1 more
#VU132750 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44494		 CWE-1321 High
Available
No
 - 29.05.2026 SB2026052927
SB2026070157
SB2026070202
and 19 more
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718		 CWE-1321 Medium
No
No
 - 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 30 more
#VU19305 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-16487		 CWE-94 High
No
No
 - 22.07.2019 SB2019020111
SB2022062806
SB2022101801
and 18 more


Showing elements 1 - 20 out of 112