Approved changes feed: RSS · Atom

cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:*

part: h version: e update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBladecenter (350f1369-a8d0-52db-9a7c-c99aa9a10c49)
Edition1881
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1290 not_vulnerable 2026-06-08 04:51:14.348505 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a power-off request to the private/blade_power_action script.
Published: 2009-04-13T16:00:00.000Z
Updated: 2024-08-07T05:04:49.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1289 vulnerable 2026-06-08 04:51:14.347544 Details available
private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter.
Published: 2009-04-13T16:00:00.000Z
Updated: 2024-08-07T05:04:49.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1288 vulnerable 2026-06-08 04:51:14.330495 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager.
Published: 2009-04-13T16:00:00.000Z
Updated: 2024-08-07T05:04:49.393Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.