Ibm Power Hmc vulnerabilities

3 known vulnerabilities affecting ibm/power_hmc.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-38280HIGHCVSS 7.8v10.1.1010.0, 10.2.1030.02023-10-16

CVE-2023-38280 [HIGH] CWE-269 CVE-2023-38280: IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escala IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 260740.

CVE-2021-29707HIGHCVSS 7.8v9.1.910.0v9.2.950.02021-07-19

CVE-2021-29707 [HIGH] CVE-2021-29707: IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 200879.

CVE-2014-0883MEDIUMCVSS 6.1≥ 7.1.0, ≤ 7.8.0v7.3.52018-04-20

CVE-2014-0883 [MEDIUM] CWE-79 CVE-2014-0883: IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerabilit IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 91163.