Known vulnerabilities in IBM Fusion HCI - page 2

Vendor: IBM Corporation
Software: IBM Fusion HCI
Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 197
Public exploits: 16
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Fusion HCI IBM Fusion HCI is affected by 197 known vulnerabilities: 21 high, 114 medium, 62 low Critical High Medium Low

Vulnerabilities (197)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135350 - Improper input validation
CVE-2026-33151		 CWE-20 Medium
No
No
 2.13.0 25.06.2026 SB20260625160
SB2026071417
#VU132273 - Incorrect Calculation
CVE-2025-14813		 CWE-682 Medium
No
No
 2.13.0 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 21 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636		 CWE-90 Medium
No
No
 2.13.0 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 16 more
#VU132259 - Covert Timing Channel
CVE-2026-5598		 CWE-385 Medium
No
No
 2.13.0 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 19 more
#VU129667 - NULL Pointer Dereference
CVE-2026-27141		 CWE-476 Medium
No
No
 2.13.0 05.05.2026 SB2026050532
SB2026052154
SB2026070811
#VU128730 - Improper Authorization
CVE-2026-33186		 CWE-285 High
No
No
 2.12.2 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 70 more
#VU128152 - Uncontrolled Recursion
CVE-2026-30922		 CWE-674 Medium
No
No
 2.13.0 27.04.2026 SB20260427104
SB20260427114
SB20260427115
and 29 more
#VU127582 - Allocation of Resources Without Limits or Throttling
CVE-2026-22036		 CWE-770 Medium
No
No
 2.13.0 24.04.2026 SB20260424138
SB20260424156
SB20260424157
and 9 more
#VU126856 - Inefficient Regular Expression Complexity
CVE-2026-4867		 CWE-1333 Low
No
No
 2.13.0 22.04.2026 SB20260422207
SB20260422208
SB2026052938
and 9 more
#VU126548 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-41066		 CWE-611 Medium
No
No
 2.13.0 20.04.2026 SB2026042075
SB2026051813
SB2026060115
and 9 more
#VU125981 - Exposure of sensitive information to an unauthorized actor
CVE-2026-40895		 CWE-200 Medium
No
No
 2.13.0 14.04.2026 SB20260414106
SB2026062434
SB20260625284
and 19 more
#VU125817 - Resource exhaustion
CVE-2026-40192		 CWE-400 Medium
No
No
 2.13.0 11.04.2026 SB2026041113
SB2026041807
SB2026041808
and 8 more
#VU123113 - Out-of-bounds write
CVE-2026-25990		 CWE-787 High
No
No
 2.13.0 20.02.2026 SB2026022027
SB2026022028
SB2026022035
and 12 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 2.13.0 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 53 more
#VU122010 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24486		 CWE-22 High
No
No
 2.12.2 26.01.2026 SB2026012610
SB2026021226
SB2026021232
and 11 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 2.12.2 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 39 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 2.13.0 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 90 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 2.13.0 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 89 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 2.13.0 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 94 more
#VU111979 - Protection Mechanism Failure
CVE-2025-50181		 CWE-693 Low
No
No
 2.13.0 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 55 more


Showing elements 21 - 40 out of 197