IBM Power Hardware Management Console
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in IBM Power Hardware Management Console.
By the Year
In 2026 there have been 2 vulnerabilities in IBM Power Hardware Management Console with an average score of 6.5 out of ten. Last year, in 2025 Power Hardware Management Console had 3 security vulnerabilities published. Right now, Power Hardware Management Console is on track to have less security vulnerabilities in 2026 than it did last year. Last year, the average CVE base score was greater by 1.57
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 6.50 |
| 2025 | 3 | 8.07 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 1 | 6.10 |
It may take a day or so for new Power Hardware Management Console vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Power Hardware Management Console Security Vulnerabilities
IBM Power Systems Firmware (FW1060.x/OP9xx) DoS via Input Length Validation
CVE-2026-17427
6.5 - Medium
- November 08, 2026
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length.
assertion failure
IBM Power Systems Firmware FW1060.00-81 DoS (CVE-2026-16697)
CVE-2026-16697
6.5 - Medium
- November 08, 2026
IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper restriction of excessive computational resources.
Allocation of Resources Without Limits or Throttling
Local Priv Escalation via Untrusted Libraries in IBM HMC v10.2.1030/v10.3.1050
CVE-2025-1950
9.3 - Critical
- April 22, 2025
IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source.
Process Control
IBM HMC V10.2/10.3 Privilege Escalation via Unnecessary Cmd Exec
CVE-2025-1951
8.4 - High
- April 22, 2025
IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges.
Execution with Unnecessary Privileges
IBM Power Hardware Mgmt Console Path Traversal V10.3.1050.0
CVE-2024-56477
6.5 - Medium
- February 14, 2025
IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Directory traversal
IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting
CVE-2014-0883
6.1 - Medium
- April 20, 2018
IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 91163.
XSS
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux
CVE-2016-5011
4.6 - Medium
- April 11, 2017
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for IBM Power Hardware Management Console or by IBM? Click the Watch button to subscribe.
