Known vulnerabilities in PowerVC 2.3.3

Known vulnerabilities in PowerVC 2.3.3

Vendor: IBM Corporation

Software: PowerVC

Version: 2.3.3

Software CPE: cpe:2.3:a:ibm_corporation:powervc:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU137405 - Command injection CVE-2026-7246	CWE-77	Low	No	No	-	14.07.2026	SB2026071423 SB2026071424 SB2026071440 and 13 more
#VU131746 - NULL Pointer Dereference CVE-2026-8723	CWE-476	Medium	No	No	-	18.05.2026	SB2026051892 SB2026061048 SB2026062221 and 5 more
#VU130990 - Missing release of memory after effective lifetime CVE-2026-44660	CWE-401	Medium	No	No	-	11.05.2026	SB2026051175 SB2026060950 SB2026073006 and 3 more
#VU130907 - Exposure of sensitive information to an unauthorized actor CVE-2026-44431	CWE-200	Medium	No	No	-	09.05.2026	SB20260509126 SB2026051588 SB2026051589 and 40 more
#VU128467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-44307	CWE-22	Medium	No	No	-	29.04.2026	SB2026042970 SB2026080522
#VU127176 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-42310	CWE-835	Medium	No	No	-	23.04.2026	SB2026041113 SB2026061950 SB2026061951 and 5 more
#VU127175 - Integer overflow CVE-2026-42308	CWE-190	Medium	No	No	-	23.04.2026	SB2026041113 SB2026061950 SB2026061951 and 5 more
#VU126856 - Inefficient Regular Expression Complexity CVE-2026-4867	CWE-1333	Low	No	No	-	22.04.2026	SB20260422207 SB20260422208 SB2026052938 and 7 more
#VU126652 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-32147	CWE-22	Low	No	No	-	21.04.2026	SB2026042143 SB2026051961 SB2026070964 and 3 more
#VU126548 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2026-41066	CWE-611	Medium	No	No	-	20.04.2026	SB2026042075 SB2026051813 SB2026060115 and 9 more
#VU125338 - Improper Certificate Validation CVE-2026-34073	CWE-295	Medium	No	No	-	08.04.2026	SB2026040896 SB20260408119 SB20260408120 and 12 more