CveMateVulnerability intelligence

IBM Bladecenter vulnerabilities

6 vulnerabilities

Known vulnerabilities in IBM Bladecenter, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2013-4037ibmbladecenter+2913y ago09-08-2013 23:00

The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack.CVE-2013-4030ibmbladecenter+3012y ago21-01-2014 01:00

Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.CVE-2013-4031ibmbladecenter+2913y ago09-08-2013 23:00

The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.CVE-2013-4038ibmbladecenter+2913y ago09-08-2013 23:00

The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.CVE-2009-1289ibmadvanced_management_module_firmware+117y ago13-04-2009 16:00

private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter.CVE-2009-1288ibmadvanced_management_module_firmware+117y ago13-04-2009 16:00

Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager.