Known vulnerabilities in IBM Fusion HCI - page 2

Vendor: IBM Corporation
Software: IBM Fusion HCI
Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 189
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Fusion HCI IBM Fusion HCI is affected by 189 known vulnerabilities: 21 high, 109 medium, 59 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132273 - Incorrect Calculation
CVE-2025-14813		 CWE-682 Medium
No
No
 2.13.0 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 15 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636		 CWE-90 Medium
No
No
 2.13.0 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 10 more
#VU132259 - Covert Timing Channel
CVE-2026-5598		 CWE-385 Medium
No
No
 2.13.0 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 13 more
#VU128730 - Improper Authorization
CVE-2026-33186		 CWE-285 High
No
No
 2.12.2 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 69 more
#VU128152 - Uncontrolled Recursion
CVE-2026-30922		 CWE-674 Medium
No
No
 2.13.0 27.04.2026 SB20260427104
SB20260427114
SB20260427115
and 28 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 2.13.0 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 52 more
#VU122010 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24486		 CWE-22 High
No
No
 2.12.2 26.01.2026 SB2026012610
SB2026021226
SB2026021232
and 10 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 2.12.2 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 37 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 2.13.0 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU120996 - Resource exhaustion
CVE-2025-69228		 CWE-400 Medium
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120995 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-69227		 CWE-835 Medium
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120994 - Exposure of sensitive information to an unauthorized actor
CVE-2025-69226		 CWE-200 Low
No
No
 2.12.1 06.01.2026 SB2026010643
SB20260216150
SB2026030633
and 8 more
#VU120993 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69225		 CWE-444 Low
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120992 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69224		 CWE-444 Low
No
No
 2.12.1 06.01.2026 SB2026010643
SB20260216150
SB2026030633
and 8 more
#VU120990 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2025-69223		 CWE-409 Medium
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026012661
SB2026012855
and 15 more
#VU120189 - Insecure Default Initialization of Resource
CVE-2025-66416		 CWE-1188 Low
No
No
 2.12.0 18.12.2025 SB2025121831
SB2025121832
SB2026041041
and 1 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 2.13.0 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 2.13.0 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 2.12.1 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU111979 - Protection Mechanism Failure
CVE-2025-50181		 CWE-693 Low
No
No
 2.13.0 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 54 more


Showing elements 21 - 40 out of 189