GCVE - cpe:2.3:h:ibm:bladecenter:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:ibm:bladecenter:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Bladecenter (`350f1369-a8d0-52db-9a7c-c99aa9a10c49`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2656`	not_vulnerable	2026-06-08 04:55:09.258444	Details available The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz. Published: 2010-07-07T18:00:00.000Z Updated: 2024-08-07T02:39:38.054Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/14237/ http://www.securityfocus.com/bid/41383 http://dsecrg.com/pages/vul/show.php?id=154 http://osvdb.org/66123	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2655`	not_vulnerable	2026-06-08 04:55:09.257221	Details available Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a .. (dot dot) in the DIR parameter. Published: 2010-07-07T18:00:00.000Z Updated: 2024-08-07T02:39:37.809Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/14237/ http://osvdb.org/66124 http://www.securityfocus.com/bid/41383 http://dsecrg.com/pages/vul/show.php?id=154	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2654`	not_vulnerable	2026-06-08 04:55:09.255975	Details available Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the (1) INDEX or (2) IPADDR parameter to private/cindefn.php, (3) the domain parameter to private/power_management_policy_options.php, the slot parameter to (4) private/pm_temp.php or (5) private/power_module.php, (6) the WEBINDEX parameter to private/blade_leds.php, or (7) the SLOT parameter to private/ipmi_bladestatus.php. Published: 2010-07-07T18:00:00.000Z Updated: 2024-08-07T02:39:37.964Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/14237/ http://osvdb.org/66125 http://osvdb.org/66128 http://osvdb.org/66130 http://www.securityfocus.com/bid/41383	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1460`	not_vulnerable	2026-06-08 04:54:08.321461	Details available The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of service (management module reboot) via TCP packets with malformed application data. Published: 2010-04-16T18:00:00.000Z Updated: 2024-08-07T01:28:40.698Z Open on db.gcve.eu Reference links http://www-947.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-5083945&brandind=5000020 http://www.securityfocus.com/bid/39499 http://dsecrg.com/pages/vul/show.php?id=149 http://www.securityfocus.com/archive/1/510744/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.