Known vulnerabilities in PowerVM NovaLink - page 3
Vendor:
IBM Corporation
Software:
PowerVM NovaLink
Software CPE:
cpe:2.3:a:ibm_corporation:powervm_novalink:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
114
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
2.2.1.1-260708
2.3.3-260714
2.3.3
2.3.2-260422
2.2.1.1-260428
2.1.1-260428
2.3.2
2.1.1-260119
2.2.1.1-260119
2.3.2-260116
2.3.1
2.3.1-251007
2.2.1.1-251007
2.1.1-251007
2.3.0.1-250610
2.2.1.1-250529
2.1.1-250528
2.0.0.0
2.2.1.1
2.2.1
2.2.0
2.3.0.1
2.3.0
2.3.0.1-252403
2.2.1.1-252403
2.1.1-250324
2.3.0-250103
2.2.1.1-250103
2.1.1-250103
2.2.1-240917
2.1.1-240913
2.2.1-240626
2.1.1-240625
2.0.3.1-240625
2.2.0-240415
2.1.1-240415
2.1.1
2.1.0
2.2.0-240119
2.1.1-240119
2.0.3.1.1-230926_4635
2.1.1-230921_4631
2.0.1-230626
2.1.1-230725
2.0.3.1.1-230726
2.1.1-230424
2.0.3.1.1-230413
2.0.1-230412
2.1.0-230209
2.0.3.1.1-230127
2.0.1-230201
2.0.3.1.1-221121
2.0.1-220923
2.0.3.1.1-220923
2.0.3.1
2.0.3
2.0.2.1
2.0.2
2.0.1
2.0
Vulnerabilities (114)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-36000 |
CWE-79 | Low | 2.1.1-251007, 2.2.1.1-251007, 2.3.1-251007 | 16.09.2025 |
SB20250916311 SB20250916316 SB2025092515 and 25 more |
||
| #VU113085 - Interpretation Conflict CVE-2024-56339 |
CWE-436 | Medium | 2.1.1-251007, 2.2.1.1-251007, 2.3.1-251007 | 21.07.2025 |
SB2025072116 SB2025072130 SB2025072305 and 45 more |
||
| #VU113074 - Stack-based buffer overflow CVE-2025-36097 |
CWE-121 | High | 2.1.1-251007, 2.2.1.1-251007, 2.3.1-251007 | 18.07.2025 |
SB20250718100 SB2025072128 SB2025072307 and 43 more |
||
| #VU112940 - Improper input validation CVE-2025-30761 |
CWE-20 | Medium | 2.1.1-251007, 2.2.1.1-251007, 2.3.1-251007 | 16.07.2025 |
SB2025071686 SB2025071687 SB2025071688 and 77 more |
||
| #VU112941 - Improper input validation CVE-2025-30754 |
CWE-20 | Medium | 2.1.1-251007, 2.2.1.1-251007, 2.3.1-251007 | 16.07.2025 |
SB2025071686 SB2025071692 SB2025071783 and 108 more |
||
| #VU112937 - Improper input validation CVE-2025-30749 |
CWE-20 | High | 2.1.1-251007, 2.2.1.1-251007, 2.3.1-251007 | 16.07.2025 |
SB2025071686 SB2025071687 SB2025071688 and 101 more |
||
| #VU112938 - Improper input validation CVE-2025-50106 |
CWE-20 | High | 2.1.1-251007, 2.2.1.1-251007, 2.3.1-251007 | 16.07.2025 |
SB2025071686 SB2025071687 SB2025071688 and 100 more |
||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | 2.1.1-251007, 2.2.1.1-251007, 2.3.1-251007 | 16.06.2025 |
SB2025061634 SB2025061635 SB2025061927 and 156 more |
||
| #VU105112 - Resource exhaustion CVE-2025-23184 |
CWE-400 | Medium | 2.1.1-250528, 2.2.1.1-250529, 2.3.0.1-250610 | 28.02.2025 |
SB2025022807 SB2025030340 SB2025041017 and 40 more |
||
| #VU103769 - Resource exhaustion CVE-2025-25193 |
CWE-400 | Low | 2.1.1-250528, 2.2.1.1-250529, 2.3.0.1-250610 | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 56 more |
||
| #VU101344 - Integer overflow CVE-2024-10917 |
CWE-190 | Low | 2.1.1-250324, 2.2.1.1-252403, 2.3.0.1-252403 | 09.12.2024 |
SB2024120927 SB2024120928 SB2024120929 and 66 more |
||
| #VU100259 - Resource Management Errors CVE-2024-47535 |
CWE-399 | Low | 2.1.1-250528, 2.2.1.1-250529, 2.3.0.1-250610 | 12.11.2024 |
SB2024111299 SB2024122313 SB2025012061 and 79 more |
||
| #VU98644 - Improper input validation CVE-2024-21235 |
CWE-20 | Medium | 2.1.1-250324, 2.2.1.1-252403, 2.3.0.1-252403 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 129 more |
||
| #VU98645 - Improper input validation CVE-2024-21210 |
CWE-20 | Low | 2.1.1-250324, 2.2.1.1-252403, 2.3.0.1-252403 | 15.10.2024 |
SB20241015215 SB2024101668 SB2024101672 and 122 more |
||
| #VU98647 - Improper input validation CVE-2024-21208 |
CWE-20 | Low | 2.1.1-250324, 2.2.1.1-252403, 2.3.0.1-252403 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 139 more |
||
| #VU98648 - Improper input validation CVE-2024-21217 |
CWE-20 | Low | 2.1.1-250324, 2.2.1.1-252403, 2.3.0.1-252403 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 142 more |
||
| #VU98137 - Allocation of Resources Without Limits or Throttling CVE-2024-40094 |
CWE-770 | Medium | 2.1.1-250103, 2.2.1.1-250103, 2.3.0-250103 | 08.10.2024 |
SB2024100835 SB2024100936 SB2024101593 and 27 more |
||
| #VU98025 - Resource exhaustion CVE-2024-47554 |
CWE-400 | Medium | 2.1.1-250103, 2.2.1.1-250103, 2.3.0-250103 | 03.10.2024 |
SB2024100352 SB2024100421 SB2024101007 and 132 more |
||
| #VU97574 - Uncontrolled Recursion CVE-2024-7254 |
CWE-674 | Medium | 2.1.1-250103, 2.2.1.1-250103, 2.3.0-250103 | 19.09.2024 |
SB2024091904 SB2024100103 SB2024101050 and 90 more |
||
| #VU94555 - Improper input validation CVE-2024-21147 |
CWE-20 | Medium | 2.1.1-240913, 2.2.1-240917 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 123 more |
Showing elements 41 - 60 out of 114