Known vulnerabilities in PowerVC - page 3

Vendor: IBM Corporation
Software: PowerVC
Software CPE: cpe:2.3:a:ibm_corporation:powervc:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 58
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerVC PowerVC is affected by 58 known vulnerabilities: 1 critical, 10 high, 37 medium, 10 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99623 - Resource exhaustion
CVE-2024-49769		 CWE-400 Medium
No
No
 2.1.1.2, 2.3.0 01.11.2024 SB2024110154
SB20241101104
SB2024110713
and 24 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 2.2.1.1 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU94524 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36039		 CWE-89 High
No
No
 - 18.07.2024 SB2024071826
SB2024071828
SB2024071829
and 9 more
#VU87570 - Improper Access Control
CVE-2024-23944		 CWE-284 Low
No
No
 - 15.03.2024 SB2024031533
SB2024052921
SB2024061902
and 23 more
#VU85848 - Resource exhaustion
CVE-2023-6481		 CWE-400 Medium
No
No
 - 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more
#VU85743 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-50447		 CWE-94 High
No
No
 - 24.01.2024 SB2024012413
SB2024012417
SB2024012465
and 34 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378		 CWE-502 Medium
No
No
 - 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU83261 - Resource exhaustion
CVE-2023-44271		 CWE-400 Medium
No
No
 - 18.11.2023 SB2023111809
SB2023111810
SB2023111811
and 25 more
#VU72036 - Error Handling
CVE-2023-23931		 CWE-388 Low
No
No
 - 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 68 more
#VU63827 - Use After Free
CVE-2021-46669		 CWE-416 Medium
No
No
 2.0.2.1 31.05.2022 SB2022061533
SB2022061727
SB2022062431
and 27 more
#VU63536 - Memory corruption
CVE-2022-27452		 CWE-119 Low
No
No
 - 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 18 more
#VU60553 - Heap-based Buffer Overflow
CVE-2022-24052		 CWE-122 Medium
No
No
 2.0.2.1 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 29 more
#VU60554 - Use After Free
CVE-2022-24050		 CWE-416 Medium
No
No
 2.0.2.1 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 29 more
#VU60555 - Memory corruption
CVE-2022-24048		 CWE-119 Medium
No
No
 2.0.2.1 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 29 more
#VU60003 - Exposed Dangerous Method or Function
CVE-2022-22817		 CWE-749 High
No
No
 - 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 26 more
#VU59320 - Resource exhaustion
CVE-2021-40797		 CWE-400 Medium
No
No
 - 09.01.2022 SB2021090835
SB2022010907
SB2022032433
and 3 more
#VU55331 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3654		 CWE-601 Medium
No
No
 - 27.07.2021 SB2021072712
SB2022032437
SB2022032440
and 2 more
#VU51645 - Command injection
CVE-2021-27928		 CWE-77 High
Available
No
 - 23.03.2021 SB2021032310
SB2021042124
SB2021042125
and 11 more


Showing elements 41 - 60 out of 58