IBM VIOS 4.1

productDE

cpe:/a:ibm:vios:4.1

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

22critical54high24medium3low

updated 2026-10-27

vulnerabilities (373)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-46214US	high8.8	89.2% (100th)	Exploit	no fix	2023-11-16	—
CVE-2023-51385US	medium6.5	19.8% (97th)	Exploit	no fix	2023-12-18	—
CVE-2024-0760US	—	4.68% (92nd)	Exploit	no fix	2024-07-23	—
CVE-2026-45447US	—	4.00% (90th)	Exploit	no fix	2026-06-09	—
CVE-2024-28757US	high7.5	2.01% (81st)	Exploit	no fix	2024-03-10	—
CVE-2025-4517US	—	1.43% (73rd)	Exploit	no fix	2025-06-03	—
CVE-2025-4138US	—	1.39% (72nd)	Exploit	no fix	2025-06-03	—
CVE-2024-50602US	—	1.12% (66th)	Exploit	no fix	2024-10-27	—
CVE-2026-63072US	—	0.92% (60th)	Exploit	no fix	2026-08-25	—
CVE-2026-22016US	—	0.70% (53rd)	Exploit	no fix	2026-04-21	—
CVE-2026-14669US	—	0.66% (51st)	Exploit	no fix	2026-08-13	—
CVE-2026-5950US	—	0.66% (51st)	Exploit	no fix	2026-05-20	—
CVE-2024-13176US	—	0.61% (49th)	Exploit	no fix	2025-01-20	—
CVE-2026-12087US	—	0.57% (47th)	Exploit	no fix	2026-06-15	—
CVE-2026-6471US	—OT elevated	0.53% (44th)	Exploit	no fix	2026-08-13	—
CVE-2026-14662US	—	0.46% (40th)	Exploit	no fix	2026-08-13	—
CVE-2026-48962US	—	0.44% (38th)	Exploit	no fix	2026-05-27	—
CVE-2026-22018US	—	0.27% (19th)	Exploit	no fix	2026-04-21	—
CVE-2026-22013US	—OT elevated	0.26% (17th)	Exploit	no fix	2026-04-21	—
CVE-2026-35414US	high8.1	0.21% (12th)	Exploit	no fix	2026-04-02	—
CVE-2026-22007US	—OT elevated	0.12% (2nd)	Exploit	no fix	2026-04-21	—
CVE-2024-2511US	—	52.4% (99th)	—	no fix	2024-04-08	—
CVE-2024-12705US	—	18.4% (97th)	—	no fix	2025-01-29	—
CVE-2024-11187US	—	15.8% (97th)	—	no fix	2025-01-29	—
CVE-2025-13878US	—	9.42% (95th)	—	no fix	2026-01-21	—
CVE-2024-9143US	—	5.84% (93rd)	—	no fix	2024-10-16	—
CVE-2017-9048US	high7.5	4.85% (92nd)	—	no fix	2017-05-18	—
CVE-2017-9050US	high7.5	4.63% (92nd)	—	no fix	2017-05-18	—
CVE-2017-9049US	high7.5	4.63% (92nd)	—	no fix	2017-05-18	—
CVE-2017-9047US	high7.5	3.19% (88th)	—	no fix	2017-05-18	—
CVE-2023-3341US	—	2.96% (87th)	—	no fix	2023-09-20	—
CVE-2025-9231US	—	2.24% (83rd)	—	no fix	2025-09-30	—
CVE-2023-4236US	—	2.21% (82nd)	—	no fix	2023-09-20	—
CVE-2022-31799US	critical9.8	2.14% (82nd)	—	no fix	2022-06-02	—
CVE-2024-1975US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-1737US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-4076US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2025-9232US	—	2.00% (81st)	—	no fix	2025-09-30	—
CVE-2026-5946US	—	1.94% (80th)	—	no fix	2026-05-20	—
CVE-2026-16865US	—	1.90% (80th)	—	no fix	2026-08-19	—
CVE-2026-18798US	—	1.70% (77th)	—	no fix	2026-08-25	—
CVE-2026-1519US	—	1.69% (77th)	—	no fix	2026-03-25	—
CVE-2026-63076US	—	1.60% (76th)	—	no fix	2026-08-25	—
CVE-2025-49796US	—	1.56% (75th)	—	no fix	2025-06-16	—
CVE-2026-3593US	critical9.8	1.54% (75th)	—	no fix	2026-05-20	—
CVE-2026-16850US	—	1.50% (74th)	—	no fix	2026-08-19	—
CVE-2026-19446US	—	1.47% (73rd)	—	no fix	2026-08-20	—
CVE-2023-7104US	high7.3	1.46% (73rd)	—	no fix	2023-12-29	—
CVE-2026-5947US	medium5.9	1.39% (72nd)	—	no fix	2026-05-20	—
CVE-2025-6021US	—	1.37% (72nd)	—	no fix	2025-06-12	—

showing 50 of 373

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write52 CVEs
CWE-190Integer Overflow or Wraparound29 CVEs
CWE-125Out-of-bounds Read28 CVEs
CWE-476NULL Pointer Dereference18 CVEs
CWE-400Uncontrolled Resource Consumption17 CVEs
CWE-416Use After Free17 CVEs
CWE-20Improper Input Validation15 CVEs
CWE-122Heap-based Buffer Overflow13 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)373 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan