Known vulnerabilities in PowerVC - page 2

Vendor: IBM Corporation
Software: PowerVC
Software CPE: cpe:2.3:a:ibm_corporation:powervc:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 58
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerVC PowerVC is affected by 58 known vulnerabilities: 1 critical, 10 high, 37 medium, 10 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121638 - Improper Verification of Cryptographic Signature
CVE-2025-65945		 CWE-347 Medium
No
No
 - 19.01.2026 SB2026011925
SB2026011926
SB2026012034
and 14 more
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 - 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 - 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU115001 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58068		 CWE-444 Medium
No
No
 - 09.09.2025 SB2025090918
SB2025090920
SB2025090921
and 13 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU113218 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-53916		 CWE-754 Medium
No
No
 2.3.0 25.07.2025 SB2025072513
SB2025072514
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 2.2.1.2, 2.3.0 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU108847 - Expected Behavior Violation
CVE-2025-46712		 CWE-440 Low
No
No
 - 09.05.2025 SB2025050954
SB2025052336
SB2025052337
and 2 more
#VU107594 - Missing Authentication for Critical Function
CVE-2025-32433		 CWE-306 Critical
Available
Exploited
 - 17.04.2025 SB2025041757
SB2025041763
SB2025042002
and 9 more
#VU106381 - Uncontrolled Memory Allocation
CVE-2025-30211		 CWE-789 High
No
No
 2.2.1.2, 2.3.0 02.04.2025 SB2025040211
SB20250403109
SB20250403110
and 7 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 2.1.1.2, 2.3.0 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801		 CWE-611 Medium
No
No
 2.2.1.2, 2.3.0 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 2.2.1.2, 2.3.0 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU99975 - Authentication Bypass by Spoofing
CVE-2024-51504		 CWE-290 High
No
No
 2.2.1.2, 2.3.0 06.11.2024 SB2024110667
SB2024121231
SB2024122015
and 12 more
#VU99613 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-49768		 CWE-444 Medium
No
No
 2.2.1.2, 2.3.0 01.11.2024 SB2024110154
SB2024110156
SB2024110157
and 23 more
#VU88199 - Observable discrepancy
CVE-2023-50782		 CWE-203 Medium
No
No
 2.2.1.2, 2.3.0 08.04.2024 SB2024040815
SB2024040816
SB2024040817
and 35 more
#VU88063 - Memory corruption
CVE-2024-28219		 CWE-119 Medium
No
No
 - 03.04.2024 SB2024040318
SB2024040320
SB2024040844
and 28 more
#VU83930 - NULL Pointer Dereference
CVE-2023-49083		 CWE-476 Medium
No
No
 2.2.1.2, 2.3.0 06.12.2023 SB2023120655
SB2023120656
SB2023121440
and 63 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 2.1.1.2, 2.3.0 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more


Showing elements 21 - 40 out of 58