Known vulnerabilities in PowerVC - page 5

Vendor: IBM Corporation
Software: PowerVC
Software CPE: cpe:2.3:a:ibm_corporation:powervc:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 112
Public exploits: 8
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerVC PowerVC is affected by 112 known vulnerabilities: 1 critical, 16 high, 73 medium, 22 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 39 more
#VU113218 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-53916		 CWE-754 Medium
No
No
 2.3.0 25.07.2025 SB2025072513
SB2025072514
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 2.2.1.2, 2.3.0 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU107594 - Missing Authentication for Critical Function
CVE-2025-32433		 CWE-306 Critical
Available
Exploited
 - 17.04.2025 SB2025041757
SB2025041763
SB2025042002
and 9 more
#VU106381 - Uncontrolled Memory Allocation
CVE-2025-30211		 CWE-789 High
No
No
 2.2.1.2, 2.3.0 02.04.2025 SB2025040211
SB20250403109
SB20250403110
and 7 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 2.1.1.2, 2.3.0 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801		 CWE-611 Medium
No
No
 2.2.1.2, 2.3.0 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 2.2.1.2, 2.3.0 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU99975 - Authentication Bypass by Spoofing
CVE-2024-51504		 CWE-290 High
No
No
 2.2.1.2, 2.3.0 06.11.2024 SB2024110667
SB2024121231
SB2024122015
and 12 more
#VU99623 - Resource exhaustion
CVE-2024-49769		 CWE-400 Medium
No
No
 2.1.1.2, 2.3.0 01.11.2024 SB2024110154
SB20241101104
SB2024110713
and 24 more
#VU99613 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-49768		 CWE-444 Medium
No
No
 2.2.1.2, 2.3.0 01.11.2024 SB2024110154
SB2024110156
SB2024110157
and 23 more
#VU88199 - Observable discrepancy
CVE-2023-50782		 CWE-203 Medium
No
No
 2.2.1.2, 2.3.0 08.04.2024 SB2024040815
SB2024040816
SB2024040817
and 35 more
#VU88063 - Memory corruption
CVE-2024-28219		 CWE-119 Medium
No
No
 - 03.04.2024 SB2024040318
SB2024040320
SB2024040844
and 28 more
#VU83930 - NULL Pointer Dereference
CVE-2023-49083		 CWE-476 Medium
No
No
 2.2.1.2, 2.3.0 06.12.2023 SB2023120655
SB2023120656
SB2023121440
and 63 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 2.1.1.2, 2.3.0 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 99 more
#VU63827 - Use After Free
CVE-2021-46669		 CWE-416 Medium
No
No
 2.0.2.1 31.05.2022 SB2022061533
SB2022061727
SB2022062431
and 27 more
#VU60553 - Heap-based Buffer Overflow
CVE-2022-24052		 CWE-122 Medium
No
No
 2.0.2.1 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 29 more
#VU60554 - Use After Free
CVE-2022-24050		 CWE-416 Medium
No
No
 2.0.2.1 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 29 more
#VU60555 - Memory corruption
CVE-2022-24048		 CWE-119 Medium
No
No
 2.0.2.1 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 29 more
#VU51645 - Command injection
CVE-2021-27928		 CWE-77 High
Available
No
 - 23.03.2021 SB2021032310
SB2021042124
SB2021042125
and 11 more


Showing elements 81 - 100 out of 112