IBM VIOS 3.1

productDE

cpe:/a:ibm:vios:3.1

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical16high27medium0low

updated 2026-10-27

vulnerabilities (103)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-38408US	critical9.8	79.7% (100th)	Exploit	no fix	2023-07-20	—
CVE-2023-51385US	medium6.5	19.8% (97th)	Exploit	no fix	2023-12-18	—
CVE-2024-0760US	—	4.68% (92nd)	Exploit	no fix	2024-07-23	—
CVE-2023-28528US	high7.8	1.46% (73rd)	Exploit	no fix	2023-04-28	—
CVE-2024-13176US	—	0.61% (49th)	Exploit	no fix	2025-01-20	—
CVE-2022-32215US	medium6.5	70.2% (99th)	—	no fix	2022-07-14	—
CVE-2024-2511US	—	52.4% (99th)	—	no fix	2024-04-08	—
CVE-2024-12705US	—	18.4% (97th)	—	no fix	2025-01-29	—
CVE-2024-11187US	—	15.8% (97th)	—	no fix	2025-01-29	—
CVE-2024-9143US	—	5.84% (93rd)	—	no fix	2024-10-16	—
CVE-2017-9048US	high7.5	4.85% (92nd)	—	no fix	2017-05-18	—
CVE-2017-9050US	high7.5	4.63% (92nd)	—	no fix	2017-05-18	—
CVE-2017-9049US	high7.5	4.63% (92nd)	—	no fix	2017-05-18	—
CVE-2017-9047US	high7.5	3.19% (88th)	—	no fix	2017-05-18	—
CVE-2023-3341US	—	2.96% (87th)	—	no fix	2023-09-20	—
CVE-2022-31081US	medium6.5	2.35% (84th)	—	no fix	2022-06-27	—
CVE-2025-9231US	—	2.24% (83rd)	—	no fix	2025-09-30	—
CVE-2023-4236US	—	2.21% (82nd)	—	no fix	2023-09-20	—
CVE-2024-1975US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-1737US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-4076US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2022-2906US	high7.5	2.07% (81st)	—	no fix	2022-09-21	—
CVE-2025-9232US	—	2.00% (81st)	—	no fix	2025-09-30	—
CVE-2022-3080US	high7.5	1.95% (80th)	—	no fix	2022-09-21	—
CVE-2022-21634US	—	1.75% (78th)	—	no fix	2022-10-18	—
CVE-2025-49796US	—	1.56% (75th)	—	no fix	2025-06-16	—
CVE-2023-7104US	high7.3	1.46% (73rd)	—	no fix	2023-12-29	—
CVE-2022-2881US	high8.2	1.42% (73rd)	—	no fix	2022-09-21	—
CVE-2025-6021US	—	1.37% (72nd)	—	no fix	2025-06-12	—
CVE-2023-5679US	—	1.29% (70th)	—	no fix	2024-02-13	—
CVE-2023-5517US	—	1.29% (70th)	—	no fix	2024-02-13	—
CVE-2024-21217US	—	1.15% (67th)	—	no fix	2024-10-15	—
CVE-2021-28167US	medium6.5	1.13% (66th)	—	no fix	2021-04-21	—
CVE-2023-6516US	—	1.11% (66th)	—	no fix	2024-02-13	—
CVE-2021-41041US	medium5.3	1.08% (65th)	—	no fix	2022-04-27	—
CVE-2023-51765US	medium5.3OT elevated	1.08% (65th)	—	no fix	2023-12-24	—
CVE-2023-42950US	high8.8	1.07% (65th)	—	no fix	2024-03-28	—
CVE-2024-20926US	—	1.03% (64th)	—	no fix	2024-01-16	—
CVE-2024-21208US	—	1.01% (63rd)	—	no fix	2024-10-15	—
CVE-2026-0990US	—	0.95% (61st)	—	no fix	2026-01-15	—
CVE-2022-21597US	—	0.93% (60th)	—	no fix	2022-10-18	—
CVE-2024-21235US	—	0.93% (60th)	—	no fix	2024-10-15	—
CVE-2023-2829US	—	0.88% (59th)	—	no fix	2023-06-21	—
CVE-2024-20921US	—OT elevated	0.86% (58th)	—	no fix	2024-02-17	—
CVE-2024-21003US	—	0.86% (58th)	—	no fix	2024-04-16	—
CVE-2024-21005US	—	0.85% (58th)	—	no fix	2024-04-16	—
CVE-2023-38264US	high7.5	0.85% (58th)	—	no fix	2024-05-14	—
CVE-2025-49794US	—	0.83% (57th)	—	no fix	2025-06-16	—
CVE-2022-3676US	medium6.5	0.81% (57th)	—	no fix	2022-10-24	—
CVE-2024-21210US	—	0.81% (57th)	—	no fix	2024-10-15	—

showing 50 of 103

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation24 CVEs
CWE-787Out-of-bounds Write8 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer7 CVEs
CWE-125Out-of-bounds Read7 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-770Allocation of Resources Without Limits or Throttling5 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)103 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan