Known vulnerabilities in IBM Fusion HCI - page 6

Vendor: IBM Corporation
Software: IBM Fusion HCI
Software CPE: cpe:2.3:a:ibm_corporation:storage_fusion:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 197
Public exploits: 16
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Fusion HCI IBM Fusion HCI is affected by 197 known vulnerabilities: 21 high, 114 medium, 62 low Critical High Medium Low

Vulnerabilities (197)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110138 - Resource exhaustion
CVE-2024-33664		 CWE-400 Medium
No
No
 2.10.0 03.06.2025 SB2025060316
SB2025060320
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152		 CWE-918 Medium
Available
No
 2.10.0 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 43 more
#VU104138 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-45339		 CWE-59 Low
No
No
 2.10.0 21.02.2025 SB2025022137
SB2025022138
SB2025022141
and 35 more
#VU102052 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-40465		 CWE-327 Medium
No
No
 2.9.0 30.12.2024 SB2024123083
#VU101827 - Security Features
CVE-2024-11079		 CWE-254 High
No
No
 2.10.0 18.12.2024 SB2024121821
SB2024121823
SB2024121824
and 5 more
#VU100999 - Information Exposure Through Log Files
CVE-2024-8775		 CWE-532 Low
No
No
 2.10.0 27.11.2024 SB2024112745
SB2024112746
SB2024120371
and 14 more
#VU100998 - Incorrect Authorization
CVE-2024-9902		 CWE-863 Low
No
No
 2.10.0 27.11.2024 SB2024112745
SB2024112746
SB2024120371
and 15 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 2.10.0 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU99567 - Resource exhaustion
CVE-2024-49767		 CWE-400 Medium
No
No
 2.9.0 31.10.2024 SB2024103173
SB2024103176
SB2024110601
and 30 more
#VU99566 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49766		 CWE-22 Medium
No
No
 2.9.0 31.10.2024 SB2024103173
SB2024121313
SB2024121851
and 16 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 2.10.0 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 2.10.0 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 2.10.0 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 2.9.0 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 2.9.0 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 2.9.0 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 2.9.0 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU91833 - Cryptographic Issues
CVE-2024-33663		 CWE-310 Medium
No
No
 2.10.0 12.06.2024 SB2024061202
SB2024090612
SB2024110708
and 2 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 2.9.0 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU81467 - UNIX Symbolic Link (Symlink) Following
CVE-2023-5115		 CWE-61 Low
No
No
 2.10.0 04.10.2023 SB2023100466
SB2023100475
SB2023101275
and 9 more


Showing elements 101 - 120 out of 197