Known vulnerabilities in IBM Fusion HCI - page 5

Vendor: IBM Corporation
Software: IBM Fusion HCI
Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 189
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Fusion HCI IBM Fusion HCI is affected by 189 known vulnerabilities: 21 high, 109 medium, 59 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110141 - Inefficient Regular Expression Complexity
CVE-2024-9506		 CWE-1333 Medium
No
No
 2.10.0 03.06.2025 SB2025060319
SB2025060320
#VU107611 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-6827		 CWE-444 High
No
No
 2.10.0 18.04.2025 SB2025041831
SB2025041832
SB2025041834
and 15 more
#VU105862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-57965		 CWE-79 Medium
No
No
 2.10.0 19.03.2025 SB2025031916
SB2025031918
SB2025050262
and 14 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152		 CWE-918 Medium
Available
No
 2.10.0 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 42 more
#VU104138 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-45339		 CWE-59 Low
No
No
 2.10.0 21.02.2025 SB2025022137
SB2025022138
SB2025022141
and 35 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 2.10.0 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 2.10.0 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU101868 - Resource exhaustion
CVE-2024-45338		 CWE-400 Medium
No
No
 2.10.0 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU100999 - Information Exposure Through Log Files
CVE-2024-8775		 CWE-532 Low
No
No
 2.10.0 27.11.2024 SB2024112745
SB2024112746
SB2024120371
and 14 more
#VU100998 - Incorrect Authorization
CVE-2024-9902		 CWE-863 Low
No
No
 2.10.0 27.11.2024 SB2024112745
SB2024112746
SB2024120371
and 15 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 2.10.0 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 2.10.0 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU98760 - Improper input validation
CVE-2024-47764		 CWE-20 Low
No
No
 2.10.0 17.10.2024 SB2024101722
SB20241022349
SB2024103080
and 35 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 2.10.0 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 2.10.0 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 2.10.0 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU95146 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6783		 CWE-79 Low
No
No
 2.10.0 01.08.2024 SB2024080143
SB2025060320
#VU85210 - Improper input validation
CVE-2024-21319		 CWE-20 Low
No
No
 2.10.0 09.01.2024 SB2024010971
SB2024011058
SB2024011059
and 11 more
#VU81467 - UNIX Symbolic Link (Symlink) Following
CVE-2023-5115		 CWE-61 Low
No
No
 2.10.0 04.10.2023 SB2023100466
SB2023100475
SB2023101275
and 9 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-29217		 CWE-327 Medium
No
No
 2.10.0 13.05.2022 SB2022051319
SB2022071428
SB2022071429
and 12 more


Showing elements 81 - 100 out of 189