Advanced Management Module

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:ibm:advanced_management_module:2.46:c:*:*:*:*:*:*

part: h version: 2.46 update: c

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAdvanced Management Module (84dca71a-c880-5dfb-9119-d0a6dfbd323e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4007 vulnerable 2026-06-08 05:04:33.542860 Details available
Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-08-16T01:00:00.000Z
Updated: 2024-08-06T16:30:49.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2656 vulnerable 2026-06-08 04:55:09.258272 Details available
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz.
Published: 2010-07-07T18:00:00.000Z
Updated: 2024-08-07T02:39:38.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2655 vulnerable 2026-06-08 04:55:09.257047 Details available
Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a .. (dot dot) in the DIR parameter.
Published: 2010-07-07T18:00:00.000Z
Updated: 2024-08-07T02:39:37.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2654 vulnerable 2026-06-08 04:55:09.248679 Details available
Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the (1) INDEX or (2) IPADDR parameter to private/cindefn.php, (3) the domain parameter to private/power_management_policy_options.php, the slot parameter to (4) private/pm_temp.php or (5) private/power_module.php, (6) the WEBINDEX parameter to private/blade_leds.php, or (7) the SLOT parameter to private/ipmi_bladestatus.php.
Published: 2010-07-07T18:00:00.000Z
Updated: 2024-08-07T02:39:37.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1460 vulnerable 2026-06-08 04:54:08.317218 Details available
The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of service (management module reboot) via TCP packets with malformed application data.
Published: 2010-04-16T18:00:00.000Z
Updated: 2024-08-07T01:28:40.698Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.