Hardware Management Console

3 CVEs product

Monthly

CVE-2025-36125 MEDIUM This Month

IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM XSS Hardware Management Console
NVD
CVSS 3.1
6.4
EPSS
0.0%
CVE-2025-1951 HIGH This Week

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

IBM Privilege Escalation Hardware Management Console
NVD
CVSS 3.1
8.4
EPSS
0.0%
CVE-2025-1950 CRITICAL Act Now

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure IBM Hardware Management Console
NVD
CVSS 3.1
9.3
EPSS
0.0%
CVE-2025-36125
EPSS 0% CVSS 6.4
MEDIUM This Month

IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM XSS Hardware Management Console
NVD
CVE-2025-1951
EPSS 0% CVSS 8.4
HIGH This Week

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

IBM Privilege Escalation Hardware Management Console
NVD
CVE-2025-1950
EPSS 0% CVSS 9.3
CRITICAL Act Now

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure IBM Hardware Management Console
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy