Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM AIX, VIOS — ibm.com/support/pages/node/7251173 Clear all filters
TI-2025-24765 CVE-2025-36236 · GHSA-5x48-f75w-m9hh

AIX Path Traversal

Priority MEDIUM 46

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00525 Published 2025-11-13 No fix listed CWE-22
TI-2025-24774 CVE-2025-36250 · GHSA-gf4w-g7vv-vr2w

AIX Code Execution

Priority MEDIUM 50

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00673 Published 2025-11-13 No fix listed CWE-114
TI-2025-24686 CVE-2025-36096 · GHSA-gcw9-j843-4vfx

AIX Insufficiently Protected Credentials

Priority MEDIUM 41

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00323 Published 2025-11-13 No fix listed CWE-522
TI-2025-24775 CVE-2025-36251 · GHSA-hfx3-278h-qhxq

AIX Command Execution

Priority MEDIUM 44

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00542 Published 2025-11-13 No fix listed CWE-114