Known vulnerabilities in PowerVC - page 4

Vendor: IBM Corporation
Software: PowerVC
Software CPE: cpe:2.3:a:ibm_corporation:powervc:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 112
Public exploits: 8
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerVC PowerVC is affected by 112 known vulnerabilities: 1 critical, 16 high, 73 medium, 22 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131746 - NULL Pointer Dereference
CVE-2026-8723		 CWE-476 Medium
No
No
 - 18.05.2026 SB2026051892
SB2026061048
SB2026062221
and 7 more
#VU128467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-44307		 CWE-22 Medium
No
No
 - 29.04.2026 SB2026042970
SB2026080522
#VU127176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42310		 CWE-835 Medium
No
No
 - 23.04.2026 SB2026041113
SB2026061950
SB2026061951
and 5 more
#VU126856 - Inefficient Regular Expression Complexity
CVE-2026-4867		 CWE-1333 Low
No
No
 - 22.04.2026 SB20260422207
SB20260422208
SB2026052938
and 9 more
#VU126548 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-41066		 CWE-611 Medium
No
No
 - 20.04.2026 SB2026042075
SB2026051813
SB2026060115
and 9 more
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-23941		 CWE-444 High
No
No
 2.3.2 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 7 more
#VU125774 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23942		 CWE-22 Low
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125772 - Relative Path Traversal
CVE-2026-21620		 CWE-23 Low
No
No
 - 10.04.2026 SB2026041021
SB2026041023
SB2026041024
and 6 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718		 CWE-918 High
No
No
 - 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 33 more
#VU125102 - Resource exhaustion
CVE-2026-39865		 CWE-400 Medium
No
No
 - 08.04.2026 SB2026040829
SB20260410109
SB20260410110
and 14 more
#VU121638 - Improper Verification of Cryptographic Signature
CVE-2025-65945		 CWE-347 Medium
No
No
 - 19.01.2026 SB2026011925
SB2026011926
SB2026012034
and 14 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 - 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 39 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 - 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 90 more
#VU120975 - Cryptographic Issues
CVE-2025-69277		 CWE-310 Medium
No
No
 - 06.01.2026 SB2026010617
SB2026010621
SB2026010861
and 18 more
#VU120254 - Improper Handling of Length Parameter Inconsistency
CVE-2025-14847		 CWE-130 High
Available
Exploited
 - 23.12.2025 SB2025122318
SB2026011607
SB2026012973
and 9 more
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 - 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 - 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 52 more
#VU115001 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58068		 CWE-444 Medium
No
No
 - 09.09.2025 SB2025090918
SB2025090920
SB2025090921
and 13 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 47 more
#VU108847 - Expected Behavior Violation
CVE-2025-46712		 CWE-440 Low
No
No
 - 09.05.2025 SB2025050954
SB2025052336
SB2025052337
and 2 more


Showing elements 61 - 80 out of 112