IBM VIOS
31 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-36236 | 3.1 ; 4.1 | AIX Path Traversal | CRITICAL 9.1 | 0.5 % | ||
| CVE-2025-36250 | 3.1 ; 4.1 | AIX Code Execution | CRITICAL 10.0 | 0.7 % | ||
| CVE-2025-36096 | 3.1 ; 4.1 | AIX Insufficiently Protected Credentials | CRITICAL 9.0 | 0.3 % | ||
| CVE-2025-36251 | 3.1 ; 4.1 | AIX Command Execution | CRITICAL 9.8 | 0.5 % | ||
| CVE-2025-36244 | 3.1 ; 4.1 | IBM AIX privilege escalation | HIGH 7.4 | 0.1 % | ||
| CVE-2025-33112 | 4.1.1 | IBM AIX command execution | HIGH 8.4 | 0.2 % | ||
| CVE-2024-47102 | 3.1 ; 4.1 | IBM AIX denial of service | MEDIUM 5.5 | 0.1 % | ||
| CVE-2022-36768 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain roo | HIGH 8.4 | 0.2 % | ||
| CVE-2022-34356 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root priv | HIGH 8.4 | 0.2 % | ||
| CVE-2022-22444 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to cause a denial of service. IBM | MEDIUM 6.2 | 0.2 % | ||
| CVE-2022-22351 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a vulnerability in the nimsh daemon to cause a | HIGH 8.6 | 1.2 % | ||
| CVE-2021-38989 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-38988 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o | MEDIUM 6.2 | 0.2 % | ||
| CVE-2022-22350 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-38996 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-38955 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due to a file creation vu | MEDIUM 4.4 | 0.2 % | ||
| CVE-2021-38993 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd daemon to cause a denial | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-38995 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-38994 | 3.1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial o | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-38991 | 3.1 | IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lea | HIGH 8.4 | 0.3 % | ||
| CVE-2021-38990 | 3.1 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to c | HIGH 8.4 | 0.3 % | ||
| CVE-2021-29861 | 3.1 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IB | MEDIUM 6.2 | 0.3 % | ||
| CVE-2021-29860 | 3.1 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive | MEDIUM 6.2 | 0.3 % | ||
| CVE-2021-29862 | 3.1 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of ser | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-29801 | 3.1 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to gain root privileges. IBM | HIGH 8.4 | 0.3 % | ||
| CVE-2021-29727 | 3.1 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-For | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-29741 | 3.1 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root privileges. IBM X-Force | HIGH 8.4 | 0.3 % | ||
| CVE-2021-29693 | 3.1 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a | MEDIUM 4.9 | 0.6 % | ||
| CVE-2020-4887 | 3.1 | IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files | MEDIUM 6.2 | 0.3 % | ||
| CVE-2020-4829 | 3.1 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root privileges. IBM X-Fo | HIGH 8.4 | 0.4 % | ||
| CVE-2020-4788 | 3.1 | IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache un | MEDIUM 5.1 | 0.4 % |