This page lists publicly disclosed CVE vulnerabilities affecting ibm hardware_management_console (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-36125 | IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | [email protected] | 6.4 | 0.03% | 2025-09-09 | 2025-12-19 |
| CVE-2025-1951 | IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges. | [email protected] | 8.4 | 0.02% | 2025-04-22 | 2025-08-12 |
| CVE-2025-1950 | IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source. | [email protected] | 9.3 | 0.07% | 2025-04-22 | 2025-08-14 |
| CVE-2023-38280 | IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 260740. | [email protected] | 8.4 | 0.03% | 2023-10-16 | 2024-11-21 |
| CVE-2021-29707 | IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 200879. | [email protected] | 7.8 | 0.13% | 2021-07-19 | 2024-11-21 |
| CVE-2016-0230 | IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors. | [email protected] | 6.8 | 0.08% | 2016-07-07 | 2026-05-06 |
| CVE-2009-1806 | Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server (VIOS) partitions. NOTE: some of these details are obtained from third party information. | [email protected] | 9.3 | 0.50% | 2009-05-28 | 2026-04-23 |
| CVE-2009-0178 | Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and attack vectors. | [email protected] | 10.0 | 1.03% | 2009-01-20 | 2026-04-23 |
| CVE-2008-5035 | The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote attackers to cause a denial of service (daemon crash or hang) via a packet with an invalid length. | [email protected] | 5.0 | 1.83% | 2008-11-10 | 2026-04-23 |
| CVE-2008-0495 | Unspecified vulnerability in the Pegasus CIM Server in IBM Hardware Management Console (HMC) 7 R3.2.0 allows remote attackers to cause a denial of service via unspecified vectors. | [email protected] | 7.8 | 4.03% | 2008-01-30 | 2026-04-23 |
| CVE-2007-6305 | Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC commands." | [email protected] | 4.6 | 0.05% | 2007-12-10 | 2026-04-23 |
| CVE-2007-6294 | Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via "some HMC commands." | [email protected] | 4.9 | 0.05% | 2007-12-10 | 2026-04-23 |
| CVE-2007-6293 | Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges via "some HMC commands." | [email protected] | 10.0 | 0.95% | 2007-12-10 | 2026-04-23 |
| CVE-2005-0539 | Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard. | [email protected] | 4.6 | 0.05% | 2005-05-02 | 2026-04-16 |