Product by IBM
Power Hardware Management Console
15 known vulnerabilities in Power Hardware Management Console (IBM), 1 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 160 other products | 7.5 | |
| Critical | CVE-2024-5535 | SSL_select_next_proto buffer overread | 9.1 | |
| High | CVE-2024-8176 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat | 7.5 | |
| Critical | CVE-2024-52533 | GNOME GLib: Buffer Overflow | 9.8 | |
| Critical | CVE-2026-12943 | This Power Hardware Management Console update is being released to address | 9.8 | |
| Critical | CVE-2026-1188 | Eclipse OMR: Incorrect Calculation of Buffer Size | 9.8 | |
| High | CVE-2024-52532 | Red Hat Enterprise Linux 10: Infinite Loop | 7.5 | |
| High | CVE-2024-52530 | Red Hat Enterprise Linux 10: security vulnerability | 7.5 | |
| Medium | CVE-2024-13176 | Timing side-channel in ECDSA signature computation | 4.1 | |
| Medium | CVE-2024-52531 | Red Hat Enterprise Linux 10: Out-of-bounds Write | 6.5 | |
| Medium | CVE-2024-56477 | IBM Power Hardware Management Console directory traversal | 6.5 | |
| Medium | CVE-2014-0883 | IBM Power Hardware Management Console cross-site scripting | 6.1 | |
| Not rated | CVE-2012-3296 | IBM Power Hardware Management Console: Cross-Site Scripting (XSS) | — | |
| High | CVE-2017-1134 | IBM Tivoli System Automation for Multiplatforms: security vulnerability | 7.8 | |
| Medium | CVE-2016-5011 | Kernel util-linux: Denial of Service | 4.6 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,