Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

15 records in Hardware Management Console · all components

TI-2026-11016 CVE-2026-12943 · GHSA-hvmw-g754-cmg9

This Power Hardware Management Console update is being released to address

Priority MEDIUM 50

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00758 Published 2026-07-30 No fix listed CWE-78
TI-2025-01695 CVE-2025-1950 · GHSA-qcvj-mcp5-pjg8

IBM Hardware Management Console - Power Systems command execution

Priority MEDIUM 41

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.002 Published 2025-04-22 No fix listed CWE-114
TI-2025-01696 CVE-2025-1951 · GHSA-6mcv-x7cp-3q3f

IBM Hardware Management Console - Power Systems command execution

Priority LOW 38

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00224 Published 2025-04-22 No fix listed CWE-250
TI-2023-19683 CVE-2023-38280 · GHSA-rcq5-59gf-jqxv

IBM Power HMC privilege escalation

Priority LOW 38

IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their privileges to root access on a restricted shell.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00171 Published 2023-10-16 No fix listed CWE-269
TI-2016-00202 CVE-2016-0230 · GHSA-pxf8-85w5-w34j

IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3…

Priority LOW 30

IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00436 Published 2016-07-07 No fix listed CWE-264
TI-2008-04788 CVE-2008-5035 · GHSA-5jc8-p25f-c6mc

The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC)…

Priority LOW 27

The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote attackers to cause a denial of service (daemon crash or hang) via a packet with an…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02079 Published 2008-11-10 No fix listed CWE-399
Open these records in search →