Known vulnerabilities in IBM Fusion HCI 2.12.2

Vendor: IBM Corporation
Software: IBM Fusion HCI
Version: 2.12.2
Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Fusion HCI version 2.12.2 IBM Fusion HCI 2.12.2 is affected by 25 vulnerabilities: 3 high, 15 medium, 7 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137734 - Improper Authentication
CVE-2026-34531		 CWE-287 High
No
No
 2.13.0 15.07.2026 SB2026071540
SB2026071541
SB2026071550
and 1 more
#VU137406 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32711		 CWE-22 Low
No
No
 2.13.0 14.07.2026 SB2026071436
SB2026071437
SB2026071438
and 2 more
#VU137405 - Command injection
CVE-2026-7246		 CWE-77 Low
No
No
 2.13.0 14.07.2026 SB2026071423
SB2026071424
SB2026071440
and 10 more
#VU135350 - Improper input validation
CVE-2026-33151		 CWE-20 Medium
No
No
 2.13.0 25.06.2026 SB20260625160
SB2026071417
#VU134929 - Improper input validation
CVE-2025-68470		 CWE-20 Low
No
No
 2.13.0 19.06.2026 SB2026061981
SB2026071420
#VU134928 - Cross-Site Request Forgery (CSRF)
CVE-2026-22030		 CWE-352 Low
No
No
 2.13.0 19.06.2026 SB2026061980
SB2026061987
SB2026071420
#VU129667 - NULL Pointer Dereference
CVE-2026-27141		 CWE-476 Medium
No
No
 2.13.0 05.05.2026 SB2026050532
SB2026052154
SB2026070811
#VU128353 - Resource exhaustion
CVE-2026-34043		 CWE-400 Medium
No
No
 2.13.0 28.04.2026 SB20260428183
SB2026052719
SB2026052720
and 7 more
#VU128152 - Uncontrolled Recursion
CVE-2026-30922		 CWE-674 Medium
No
No
 2.13.0 27.04.2026 SB20260427104
SB20260427114
SB20260427115
and 27 more
#VU127582 - Allocation of Resources Without Limits or Throttling
CVE-2026-22036		 CWE-770 Medium
No
No
 2.13.0 24.04.2026 SB20260424138
SB20260424156
SB20260424157
and 5 more
#VU126856 - Inefficient Regular Expression Complexity
CVE-2026-4867		 CWE-1333 Low
No
No
 2.13.0 22.04.2026 SB20260422207
SB20260422208
SB2026052938
and 5 more
#VU126548 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-41066		 CWE-611 Medium
No
No
 2.13.0 20.04.2026 SB2026042075
SB2026051813
SB2026060115
and 8 more
#VU125981 - Exposure of sensitive information to an unauthorized actor
CVE-2026-40895		 CWE-200 Medium
No
No
 2.13.0 14.04.2026 SB20260414106
SB2026062434
SB20260625284
and 7 more
#VU125817 - Resource exhaustion
CVE-2026-40192		 CWE-400 Medium
No
No
 2.13.0 11.04.2026 SB2026041113
SB2026041807
SB2026041808
and 8 more
#VU124772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22029		 CWE-79 Low
No
No
 2.13.0 01.04.2026 SB2026040154
SB2026040164
SB2026041309
and 10 more
#VU124088 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-21884		 CWE-94 High
No
No
 2.13.0 18.03.2026 SB2026031906
SB20260428180
SB2026061991
and 1 more
#VU123113 - Out-of-bounds write
CVE-2026-25990		 CWE-787 High
No
No
 2.13.0 20.02.2026 SB2026022027
SB2026022028
SB2026022035
and 12 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 2.13.0 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 51 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 2.13.0 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 2.13.0 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more


Showing elements 1 - 20 out of 25