HM
Product
Hardware Management Console
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 3Low 0
Watch
Add Hardware Management Console to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12943 | 9.8 | Jul 30 | This Power Hardware Management Console update is being released to address Affected: 10.3.1050.0 before 10.3.1064.1; 11.1.1110.0 before 11.1.1112.1 |
| CVE-2025-1950 | 7.8 | Apr 22 | IBM Hardware Management Console - Power Systems command execution Affected: 10.2.1030.0; 10.3.1050.0 |
| CVE-2023-38280 | 7.8 | Oct 16 | IBM Power HMC privilege escalation Affected: 10.1.1010.0; 10.2.1030.0 |
| CVE-2021-29707 | 7.8 | Jul 19 | IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell Affected: 9.1.910.0; 9.2.950.0 |
| CVE-2016-0230 | 6.8 | Jul 7 | IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0… Affected: 7.9.0; 7.9.0; 7.9.0; 7.9.0; 8.1.0; 8.1.0; +16 more |
| CVE-2025-1951 | 6.7 | Apr 22 | IBM Hardware Management Console - Power Systems command execution Affected: 10.2.1030.0; 10.3.1050.0 |
| CVE-2025-36125 | 5.4 | Sep 9 | IBM Hardware Management Console - Power Systems cross-site scripting Affected: 10.3.1050.0; 11.1.1110.0 |
| CVE-2009-1806 | – | May 28 | Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a… Affected: 7.3.4.0 |
| CVE-2009-0178 | – | Jan 20 | Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and attack vectors Affected: 7.3.2.0 |
| CVE-2008-5035 | – | Nov 10 | The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote attackers to cause a denial of service… Affected: 3.2.0; 3.3.0 |
| CVE-2008-0495 | – | Jan 30 | Unspecified vulnerability in the Pegasus CIM Server in IBM Hardware Management Console (HMC) 7 R3.2.0 allows remote attackers to cause a denial of service via unspecified vectors Affected: 7.3.2.0 |
| CVE-2007-6305 | – | Dec 10 | Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC commands." Affected: 7.3.2.0 |
| CVE-2007-6294 | – | Dec 10 | Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via "some HMC commands." Affected: 3.3.7 |
| CVE-2007-6293 | – | Dec 10 | Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges via "some HMC commands." Affected: 6.1.3 |
| CVE-2005-0539 | – | May 2 | Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard Affected: 4.1; 4.2 |
Showing 15