IBM Virtual I/O Server (VIOS) 4.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:vios:4.1:*:*:*:*:*:*:*
part: a version: 4.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Vios (60217296-7514-53fe-8112-0ee153a5adfe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36251 |
vulnerable | 2026-06-08 07:21:01.532055 |
AIX Command Execution
CRITICAL (9.6)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347.
Published: 2025-11-13T22:01:13.345Z
Updated: 2026-02-26T16:56:59.416Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36250 |
vulnerable | 2026-06-08 07:21:01.531207 |
AIX Code Execution
CRITICAL (10)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.
Published: 2025-11-13T22:01:27.447Z
Updated: 2026-02-26T16:56:58.500Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36244 |
vulnerable | 2026-06-08 07:21:01.508718 |
IBM AIX privilege escalation
HIGH (7.4)
IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables.
Published: 2025-09-16T14:38:08.632Z
Updated: 2026-02-26T17:48:29.890Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36236 |
vulnerable | 2026-06-08 07:21:01.481961 |
AIX Path Traversal
HIGH (8.2)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on the system.
Published: 2025-11-13T22:01:31.264Z
Updated: 2025-11-14T15:25:04.199Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36096 |
vulnerable | 2026-06-08 07:21:00.944386 |
AIX Insufficiently Protected Credentials
CRITICAL (9)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.
Published: 2025-11-13T22:01:22.072Z
Updated: 2026-02-26T16:56:58.936Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52906 |
vulnerable | 2026-06-08 06:52:16.398926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47115 |
vulnerable | 2026-06-08 06:48:11.421734 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47102 |
vulnerable | 2026-06-08 06:48:11.371767 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27273 |
vulnerable | 2026-06-08 06:31:28.396563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27260 |
vulnerable | 2026-06-08 06:31:28.353174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25021 |
vulnerable | 2026-06-08 06:29:42.192221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45167 |
vulnerable | 2026-06-08 06:12:42.091873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.