CVE-2025-36251
- EPSS 0.08%
- Veröffentlicht 13.11.2025 22:15:51
- Zuletzt bearbeitet 19.11.2025 22:08:07
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was p...
CVE-2025-36096
- EPSS 0.06%
- Veröffentlicht 13.11.2025 22:15:50
- Zuletzt bearbeitet 19.11.2025 22:11:50
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.
CVE-2025-36236
- EPSS 0.06%
- Veröffentlicht 13.11.2025 22:15:50
- Zuletzt bearbeitet 19.11.2025 22:11:10
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary ...
CVE-2025-36250
- EPSS 0.1%
- Veröffentlicht 13.11.2025 22:15:50
- Zuletzt bearbeitet 19.11.2025 22:08:58
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a v...
CVE-2025-36244
- EPSS 0.02%
- Veröffentlicht 16.09.2025 14:38:08
- Zuletzt bearbeitet 17.10.2025 14:34:38
IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables.
CVE-2025-33112
- EPSS 0.02%
- Veröffentlicht 10.06.2025 16:28:44
- Zuletzt bearbeitet 25.07.2025 19:09:10
IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input.
CVE-2024-56347
- EPSS 0.11%
- Veröffentlicht 18.03.2025 16:16:09
- Zuletzt bearbeitet 25.07.2025 18:45:01
IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls.
- EPSS 0.15%
- Veröffentlicht 18.03.2025 16:15:23
- Zuletzt bearbeitet 25.07.2025 18:44:46
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls.
CVE-2024-52906
- EPSS 0.02%
- Veröffentlicht 25.12.2024 15:15:07
- Zuletzt bearbeitet 25.07.2025 21:13:32
IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service.
CVE-2024-47102
- EPSS 0.02%
- Veröffentlicht 25.12.2024 15:15:06
- Zuletzt bearbeitet 29.09.2025 16:15:35
IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service.