Known vulnerabilities in PowerVC - page 2

Vendor: IBM Corporation
Software: PowerVC
Software CPE: cpe:2.3:a:ibm_corporation:powervc:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 112
Public exploits: 8
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerVC PowerVC is affected by 112 known vulnerabilities: 1 critical, 16 high, 73 medium, 22 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146824 - Selection of Less-Secure Algorithm During Negotiat
CVE-2026-55953		 CWE-757 High
No
No
 - 02.09.2026 SB20260902104
SB20260902105
SB20260902106
and 12 more
#VU146822 - Uncontrolled Recursion
CVE-2026-58227		 CWE-674 Medium
No
No
 - 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 8 more
#VU146786 - Uncaught Exception
CVE-2026-82417		 CWE-248 Medium
No
No
 - 02.09.2026 SB2026090291
SB2026092001
SB2026092002
and 5 more
#VU146785 - Allocation of Resources Without Limits or Throttling
CVE-2026-82562		 CWE-770 Low
No
No
 - 02.09.2026 SB2026090291
SB2026092001
SB2026092002
and 5 more
#VU146518 - Improper input validation
CVE-2026-54272		 CWE-20 Medium
No
No
 - 31.08.2026 SB20260831108
SB20260831126
SB20260831127
and 3 more
#VU146052 - Improper Output Neutralization for Logs
CVE-2026-15603		 CWE-117 Medium
No
No
 - 28.08.2026 SB2026082834
SB2026100122
SB2026100820
#VU146051 - Improper Output Neutralization for Logs
CVE-2026-5078		 CWE-117 Medium
No
No
 - 28.08.2026 SB2026082833
SB2026100122
SB2026100820
#VU144596 - Server-Side Request Forgery (SSRF)
CVE-2026-77310		 CWE-918 Medium
No
No
 - 24.08.2026 SB2026072278
SB2026090312
SB2026091103
and 2 more
#VU139177 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-53668		 CWE-601 Medium
No
No
 - 22.07.2026 SB2026072294
SB2026100265
SB2026100817
#VU139152 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-59888		 CWE-915 Medium
No
No
 - 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 10 more
#VU137563 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-59901		 CWE-835 Medium
No
No
 - 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU137284 - Allocation of Resources Without Limits or Throttling
CVE-2026-12590		 CWE-770 Low
No
No
 - 09.07.2026 SB2026070953
SB2026093076
SB2026100829
#VU136826 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-54886		 CWE-835 Low
No
No
 - 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 9 more
#VU136825 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CVE-2026-54891		 CWE-924 Medium
No
No
 - 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 9 more
#VU136821 - Exposure of sensitive information to an unauthorized actor
CVE-2026-48855		 CWE-200 Low
No
No
 - 02.07.2026 SB2026070296
SB2026070301
SB2026070302
and 9 more
#VU136819 - Comparison using wrong factors
CVE-2026-48860		 CWE-1025 Low
No
No
 - 02.07.2026 SB2026070296
SB2026071054
SB2026071055
and 4 more
#VU136818 - Server-Side Request Forgery (SSRF)
CVE-2026-48858		 CWE-918 Low
No
No
 - 02.07.2026 SB2026070296
SB2026071054
SB2026071055
and 9 more
#VU134738 - Improper input validation
CVE-2026-54911		 CWE-20 Medium
No
No
 - 17.06.2026 SB2026061747
SB2026090542
SB2026090543
and 2 more
#VU131979 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-44405		 CWE-327 Low
No
No
 - 20.05.2026 SB2026052061
SB2026052062
SB20260715112
and 3 more
#VU123997 - Improper input validation
CVE-2026-2391		 CWE-20 Medium
No
No
 - 13.03.2026 SB2026031335
SB2026031336
SB2026032417
and 16 more


Showing elements 21 - 40 out of 112