Known vulnerabilities in IBM Fusion HCI

Vendor: IBM Corporation
Software: IBM Fusion HCI
Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 197
Public exploits: 16
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Fusion HCI IBM Fusion HCI is affected by 197 known vulnerabilities: 21 high, 114 medium, 62 low Critical High Medium Low

Vulnerabilities (197)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-6321		 CWE-22 Medium
No
No
 2.13.0 22.07.2026 SB2026072227
SB2026072228
SB2026072229
and 13 more
#VU137734 - Improper Authentication
CVE-2026-34531		 CWE-287 High
No
No
 2.13.0 15.07.2026 SB2026071540
SB2026071541
SB2026071550
and 1 more
#VU137406 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32711		 CWE-22 Low
No
No
 2.13.0 14.07.2026 SB2026071436
SB2026071437
SB2026071438
and 2 more
#VU137405 - Command injection
CVE-2026-7246		 CWE-77 Low
No
No
 2.13.0 14.07.2026 SB2026071423
SB2026071424
SB2026071440
and 13 more
#VU134929 - Improper input validation
CVE-2025-68470		 CWE-20 Low
No
No
 2.13.0 19.06.2026 SB2026061981
SB2026071420
SB2026100265
and 1 more
#VU134928 - Cross-Site Request Forgery (CSRF)
CVE-2026-22030		 CWE-352 Low
No
No
 2.13.0 19.06.2026 SB2026061980
SB2026061987
SB2026071420
#VU134878 - Inefficient Algorithmic Complexity
CVE-2026-27903		 CWE-407 Medium
No
No
 2.13.0 18.06.2026 SB2026022345
SB2026061994
SB2026061999
and 4 more
#VU128353 - Resource exhaustion
CVE-2026-34043		 CWE-400 Medium
No
No
 2.13.0 28.04.2026 SB20260428183
SB2026052719
SB2026052720
and 10 more
#VU126873 - Inefficient Regular Expression Complexity
CVE-2026-27904		 CWE-1333 Low
No
No
 2.13.0 22.04.2026 SB20260422244
SB20260423104
SB20260423105
and 16 more
#VU124772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22029		 CWE-79 Low
No
No
 2.13.0 01.04.2026 SB2026040154
SB2026040164
SB2026041309
and 11 more
#VU124088 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-21884		 CWE-94 High
No
No
 2.13.0 18.03.2026 SB2026031906
SB20260428180
SB2026061991
and 1 more
#VU123981 - Resource exhaustion
CVE-2025-58181		 CWE-400 Medium
No
No
 2.13.0 13.03.2026 SB2025122903
SB2026031315
SB2026031321
and 22 more
#VU123882 - Resource exhaustion
CVE-2025-66019		 CWE-400 Low
No
No
 2.13.0 11.03.2026 SB2026031136
SB2026041321
SB2026083116
#VU123562 - Asymmetric Resource Consumption (Amplification)
CVE-2025-68480		 CWE-405 Medium
No
No
 2.13.0 05.03.2026 SB2026030523
SB2026030527
SB2026030633
and 3 more
#VU123140 - Inefficient Regular Expression Complexity
CVE-2026-26996		 CWE-1333 Medium
No
No
 2.13.0 23.02.2026 SB2026022345
SB2026030633
SB2026032328
and 36 more
#VU121189 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-22701		 CWE-367 Low
No
No
 2.13.0 13.01.2026 SB2026011333
SB2026012349
SB2026012350
and 14 more
#VU121187 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-68146		 CWE-367 Low
No
No
 2.13.0 13.01.2026 SB2026011324
SB2026011325
SB2026011334
and 11 more
#VU121162 - Resource exhaustion
CVE-2026-22690		 CWE-400 Medium
No
No
 2.13.0 12.01.2026 SB2026011230
SB2026050843
SB2026083116
#VU121161 - Inefficient Regular Expression Complexity
CVE-2026-22691		 CWE-1333 Medium
No
No
 2.13.0 12.01.2026 SB2026011230
SB2026050843
SB2026083116
#VU120612 - Out-of-bounds read
CVE-2025-47914		 CWE-125 Medium
No
No
 2.13.0 29.12.2025 SB2025122903
SB2025122904
SB2025123103
and 20 more


Showing elements 1 - 20 out of 197