Known vulnerabilities in IBM Fusion HCI - page 3

Vendor: IBM Corporation
Software: IBM Fusion HCI
Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 197
Public exploits: 16
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Fusion HCI IBM Fusion HCI is affected by 197 known vulnerabilities: 21 high, 114 medium, 62 low Critical High Medium Low

Vulnerabilities (197)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120998 - Resource exhaustion
CVE-2025-69229		 CWE-400 Medium
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026012919
SB20260216150
and 10 more
#VU120997 - Resource Management Errors
CVE-2025-69230		 CWE-399 Low
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026030633
SB2026031147
and 4 more
#VU120996 - Resource exhaustion
CVE-2025-69228		 CWE-400 Medium
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120995 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-69227		 CWE-835 Medium
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120994 - Exposure of sensitive information to an unauthorized actor
CVE-2025-69226		 CWE-200 Low
No
No
 2.12.1 06.01.2026 SB2026010643
SB20260216150
SB2026030633
and 8 more
#VU120993 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69225		 CWE-444 Low
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120992 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69224		 CWE-444 Low
No
No
 2.12.1 06.01.2026 SB2026010643
SB20260216150
SB2026030633
and 8 more
#VU120990 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2025-69223		 CWE-409 Medium
No
No
 2.12.1 06.01.2026 SB2026010643
SB2026012661
SB2026012855
and 15 more
#VU120189 - Insecure Default Initialization of Resource
CVE-2025-66416		 CWE-1188 Low
No
No
 2.12.0 18.12.2025 SB2025121831
SB2025121832
SB2026041041
and 1 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 2.12.1 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 55 more
#VU115712 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-45286		 CWE-362 High
No
No
 2.11.0 17.09.2025 SB2023112862
SB2025091750
SB20240611290
and 1 more
#VU115711 - Missing Encryption of Sensitive Data
CVE-2025-45768		 CWE-311 High
No
No
 2.11.0 17.09.2025 SB2025091749
SB2025091750
SB2025092508
and 1 more
#VU114312 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-48050		 CWE-22 High
No
No
 2.11.0 20.08.2025 SB20250820123
SB20250820124
SB20250820125
and 15 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 2.11.0 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU113003 - Heap-based Buffer Overflow
CVE-2025-48379		 CWE-122 Low
No
No
 2.11.0 16.07.2025 SB20250716130
SB2025082202
SB2025091519
and 2 more
#VU112255 - Deserialization of Untrusted Data
CVE-2025-27818		 CWE-502 Medium
No
No
 2.11.0 04.07.2025 SB20250704102
SB2025070708
SB2025080519
and 16 more
#VU112039 - Allocation of Resources Without Limits or Throttling
CVE-2025-32386		 CWE-770 Medium
No
No
 2.11.0 30.06.2025 SB2025063006
SB2025063009
SB2025063011
and 3 more
#VU111974 - Stack-based buffer overflow
CVE-2025-32387		 CWE-121 Medium
No
No
 2.11.0 26.06.2025 SB2025062648
SB2025063009
SB2025063011
and 3 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 2.11.0 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 96 more
#VU109059 - Cryptographic Issues
CVE-2025-47278		 CWE-310 Low
No
No
 2.11.0 13.05.2025 SB2025051380
SB20250521103
SB2025052950
and 11 more


Showing elements 41 - 60 out of 197