本ページは ibm aix に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2025-36251 | IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347. | [email protected] | 9.6 | 0.50% | 2025-11-13 | 2026-06-17 |
| CVE-2025-36250 | IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346. | [email protected] | 10.0 | 0.62% | 2025-11-13 | 2026-06-17 |
| CVE-2025-36236 | IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on the system. | [email protected] | 8.2 | 0.43% | 2025-11-13 | 2026-06-17 |
| CVE-2025-36096 | IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques. | [email protected] | 9.0 | 0.26% | 2025-11-13 | 2026-06-17 |
| CVE-2025-36244 | IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables. | [email protected] | 7.4 | 0.11% | 2025-09-16 | 2026-06-17 |
| CVE-2025-33112 | IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input. | [email protected] | 8.4 | 0.19% | 2025-06-10 | 2026-06-17 |
| CVE-2024-56347 | IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls. | [email protected] | 9.6 | 0.86% | 2025-03-18 | 2026-06-17 |
| CVE-2024-56346 | IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls. | [email protected] | 10.0 | 1.06% | 2025-03-18 | 2026-06-17 |
| CVE-2024-52906 | IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service. | [email protected] | 5.5 | 0.12% | 2024-12-25 | 2026-06-17 |
| CVE-2024-47102 | IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. | [email protected] | 5.5 | 0.14% | 2024-12-25 | 2026-06-17 |
| CVE-2024-47115 | IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input. | [email protected] | 7.8 | 0.23% | 2024-12-07 | 2026-06-17 |
| CVE-2024-27260 | IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 283985. | [email protected] | 8.4 | 0.23% | 2024-05-16 | 2026-06-17 |
| CVE-2024-27273 | IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead to privilege escalation. IBM X-Force ID: 284903. | [email protected] | 8.1 | 0.15% | 2024-05-07 | 2026-06-17 |
| CVE-2024-25021 | IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary commands. IBM X-Force ID: 281320. | [email protected] | 8.4 | 0.27% | 2024-02-22 | 2026-06-17 |
| CVE-2023-45171 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to cause a denial of service. IBM X-Force ID: 267969. | [email protected] | 6.2 | 0.17% | 2024-01-10 | 2026-06-17 |
| CVE-2023-45169 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the pmsvcs kernel extension to cause a denial of service. IBM X-Force ID: 267967. | [email protected] | 6.2 | 0.17% | 2024-01-10 | 2026-06-17 |
| CVE-2023-45175 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 267973. | [email protected] | 6.2 | 0.17% | 2024-01-10 | 2026-06-17 |
| CVE-2023-45173 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial of service. IBM X-Force ID: 267971. | [email protected] | 6.2 | 0.17% | 2024-01-10 | 2026-06-17 |
| CVE-2023-45165 | IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 267963. | [email protected] | 6.2 | 0.17% | 2023-12-22 | 2026-06-17 |
| CVE-2023-45172 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to cause a denial of service. IBM X-Force ID: 267970. | [email protected] | 6.2 | 0.23% | 2023-12-19 | 2026-06-17 |