Known vulnerabilities in PowerVM NovaLink - page 4
Vendor:
IBM Corporation
Software:
PowerVM NovaLink
Software CPE:
cpe:2.3:a:ibm_corporation:powervm_novalink:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
114
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
2.2.1.1-260708
2.3.3-260714
2.3.3
2.3.2-260422
2.2.1.1-260428
2.1.1-260428
2.3.2
2.1.1-260119
2.2.1.1-260119
2.3.2-260116
2.3.1
2.3.1-251007
2.2.1.1-251007
2.1.1-251007
2.3.0.1-250610
2.2.1.1-250529
2.1.1-250528
2.0.0.0
2.2.1.1
2.2.1
2.2.0
2.3.0.1
2.3.0
2.3.0.1-252403
2.2.1.1-252403
2.1.1-250324
2.3.0-250103
2.2.1.1-250103
2.1.1-250103
2.2.1-240917
2.1.1-240913
2.2.1-240626
2.1.1-240625
2.0.3.1-240625
2.2.0-240415
2.1.1-240415
2.1.1
2.1.0
2.2.0-240119
2.1.1-240119
2.0.3.1.1-230926_4635
2.1.1-230921_4631
2.0.1-230626
2.1.1-230725
2.0.3.1.1-230726
2.1.1-230424
2.0.3.1.1-230413
2.0.1-230412
2.1.0-230209
2.0.3.1.1-230127
2.0.1-230201
2.0.3.1.1-221121
2.0.1-220923
2.0.3.1.1-220923
2.0.3.1
2.0.3
2.0.2.1
2.0.2
2.0.1
2.0
Vulnerabilities (114)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-27267 |
CWE-362 | Medium | 2.1.1-240913, 2.2.1-240917 | 12.09.2024 |
SB2024091291 SB2024091292 SB2024091618 and 57 more |
||
| #VU96058 - Exposure of sensitive information to an unauthorized actor CVE-2023-50314 |
CWE-200 | Low | 2.1.1-240913, 2.2.1-240917 | 15.08.2024 |
SB2024081566 SB2024091324 SB2024091814 and 44 more |
||
| #VU96019 - Resource exhaustion CVE-2024-38808 |
CWE-400 | Medium | 2.1.1-240913, 2.2.1-240917 | 14.08.2024 |
SB2024081480 SB2024092018 SB2024100315 and 24 more |
||
| #VU94556 - Improper input validation CVE-2024-21145 |
CWE-20 | Medium | 2.1.1-240913, 2.2.1-240917 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 130 more |
||
| #VU94557 - Improper input validation CVE-2024-21140 |
CWE-20 | Medium | 2.1.1-240913, 2.2.1-240917 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 119 more |
||
| #VU94558 - Improper input validation CVE-2024-21144 |
CWE-20 | Low | 2.1.1-240913, 2.2.1-240917 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718192 and 114 more |
||
| #VU94559 - Improper input validation CVE-2024-21131 |
CWE-20 | Low | 2.1.1-240913, 2.2.1-240917 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 135 more |
||
| #VU94560 - Improper input validation CVE-2024-21138 |
CWE-20 | Low | 2.1.1-240913, 2.2.1-240917 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 117 more |
||
| #VU88977 - Resource exhaustion CVE-2024-25026 |
CWE-400 | Medium | 2.0.3.1-240625, 2.1.1-240625, 2.2.1-240626 | 24.04.2024 |
SB2024042458 SB2024042525 SB2024042626 and 68 more |
||
| #VU88803 - Server-Side Request Forgery (SSRF) CVE-2024-22329 |
CWE-918 | Medium | 2.0.3.1-240625, 2.1.1-240625, 2.2.1-240626 | 18.04.2024 |
SB2024041812 SB2024042613 SB2024043016 and 67 more |
||
| #VU88802 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-22354 |
CWE-611 | High | 2.0.3.1-240625, 2.1.1-240625, 2.2.1-240626 | 18.04.2024 |
SB2024041812 SB2024042628 SB2024050920 and 66 more |
||
| #VU88173 - Resource exhaustion CVE-2023-51775 |
CWE-400 | Medium | 2.0.3.1-240625, 2.1.1-240625, 2.2.1-240626 | 05.04.2024 |
SB2024040525 SB2024041129 SB2024041130 and 83 more |
||
| #VU88136 - Resource exhaustion CVE-2024-27268 |
CWE-400 | Medium | 2.0.3.1-240625, 2.1.1-240625, 2.2.1-240626 | 04.04.2024 |
SB2024040437 SB2024050803 SB2024052003 and 40 more |
||
| #VU88123 - Resource exhaustion CVE-2024-22353 |
CWE-400 | Medium | 2.0.3.1-240625, 2.1.1-240625, 2.2.1-240626 | 04.04.2024 |
SB2024040423 SB2024050220 SB2024050801 and 31 more |
||
| #VU87831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-27270 |
CWE-79 | Medium | 2.0.3.1-240625, 2.1.1-240625, 2.2.1-240626 | 26.03.2024 |
SB2024032654 SB2024050220 SB2024050920 and 31 more |
||
| #VU86988 - Use of a Broken or Risky Cryptographic Algorithm CVE-2023-50312 |
CWE-327 | Low | 2.1.1-240415, 2.2.0-240415 | 04.03.2024 |
SB2024030425 SB2024031819 SB2024032049 and 49 more |
||
| #VU85468 - Improper input validation CVE-2024-20918 |
CWE-20 | Medium | 2.1.1-240415, 2.2.0-240415 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 192 more |
||
| #VU85469 - Improper input validation CVE-2024-20952 |
CWE-20 | Medium | 2.1.1-240415, 2.2.0-240415 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 189 more |
||
| #VU85470 - Improper input validation CVE-2024-20919 |
CWE-20 | Medium | 2.1.1-240415, 2.2.0-240415 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 164 more |
||
| #VU85471 - Improper input validation CVE-2024-20921 |
CWE-20 | Medium | 2.1.1-240415, 2.2.0-240415 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 185 more |
Showing elements 61 - 80 out of 114