IBM Power Hardware Management Console V11.1.1110.0-V11.1.1112.1

productDE

cpe:/a:ibm:hardware_management_console:v11.1.1110.0_-_v11.1.1112.1

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical1high0medium0low

updated 2026-10-27

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-49975US	—	33.0% (98th)	Exploit	no fix	2026-06-08	—
CVE-2025-53020US	—	4.96% (92nd)	Exploit	no fix	2025-07-10	—
CVE-2026-46333US	—	4.30% (91st)	Exploit	no fix	2026-05-15	—
CVE-2023-38709US	—	3.91% (90th)	Exploit	no fix	2024-04-04	—
CVE-2025-23048US	—	1.04% (64th)	Exploit	no fix	2025-07-10	—
CVE-2026-42536US	—	1.02% (63rd)	Exploit	no fix	2026-06-08	—
CVE-2025-49812US	—	0.61% (49th)	Exploit	no fix	2025-07-10	—
CVE-2025-49630US	—	1.35% (71st)	—	no fix	2025-07-10	—
CVE-2024-43394US	—	1.27% (70th)	—	no fix	2025-07-10	—
CVE-2026-34355US	—	1.16% (67th)	—	no fix	2026-06-08	—
CVE-2024-43204US	—	0.91% (60th)	—	no fix	2025-07-10	—
CVE-2024-42516US	—	0.82% (57th)	—	no fix	2025-07-10	—
CVE-2024-47252US	—	0.80% (56th)	—	no fix	2025-07-10	—
CVE-2026-44185US	—	0.74% (54th)	—	no fix	2026-06-08	—
CVE-2026-34356US	—	0.71% (53rd)	—	no fix	2026-06-08	—
CVE-2026-29167US	—	0.69% (53rd)	—	no fix	2026-06-08	—
CVE-2026-44186US	—	0.58% (48th)	—	no fix	2026-06-08	—
CVE-2026-43951US	—	0.55% (46th)	—	no fix	2026-06-08	—
CVE-2026-42535US	—	0.54% (45th)	—	no fix	2026-06-08	—
CVE-2026-29170US	—	0.52% (44th)	—	no fix	2026-06-08	—
CVE-2026-44631US	—	0.50% (43rd)	—	no fix	2026-06-08	—
CVE-2026-45186US	high7.5	0.48% (41st)	—	no fix	2026-05-10	—
CVE-2026-48913US	—	0.48% (41st)	—	no fix	2026-06-08	—
CVE-2026-4046US	—	0.39% (33rd)	—	no fix	2026-03-30	—
CVE-2026-44119US	—	0.18% (7th)	—	no fix	2026-06-08	—

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-416Use After Free2 CVEs
CWE-617Reachable Assertion2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.