ibm power system ac922 (8335-gth) firmware

Name: ibm power system ac922 (8335-gth) firmware
Brand: ibm

productUS

cpe:2.3:o:ibm:power_system_ac922_\(8335-gth\)_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high3medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-38960US	high7.5	1.06% (65th)	—	no fix	2022-02-04	3 versions
CVE-2022-22488US	medium4.9	0.53% (45th)	—	no fix	2022-12-12	op940 → op940.40
CVE-2021-29891US	medium4.9	0.46% (40th)	—	no fix	2022-08-22	2 versions
CVE-2018-1992US	medium6.4	0.35% (29th)	—	op920.10	2019-03-21	< op920.10
CVE-2026-16933US	—	0.17% (6th)	—	op940.a2	2026-08-19	op940 → op940.a2
CVE-2026-17100US	—	0.17% (6th)	—	op940.a2	2026-08-19	op940 → op940.a2
CVE-2026-17093US	—	0.17% (6th)	—	op940.a2	2026-08-19	op940 → op940.a2
CVE-2026-17429US	—OT elevated	0.15% (4th)	—	op940.a2	2026-08-19	op940 → op940.a2

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-787Out-of-bounds Write1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.