Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:vios:3.1:*:*:*:*:*:*:*

part: a version: 3.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductVios (60217296-7514-53fe-8112-0ee153a5adfe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36251 vulnerable 2026-06-08 07:21:01.531928 AIX Command Execution
CRITICAL (9.6)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347.
Published: 2025-11-13T22:01:13.345Z
Updated: 2026-02-26T16:56:59.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36250 vulnerable 2026-06-08 07:21:01.531050 AIX Code Execution
CRITICAL (10)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls.  This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.
Published: 2025-11-13T22:01:27.447Z
Updated: 2026-02-26T16:56:58.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36244 vulnerable 2026-06-08 07:21:01.508559 IBM AIX privilege escalation
HIGH (7.4)
IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables.
Published: 2025-09-16T14:38:08.632Z
Updated: 2026-02-26T17:48:29.890Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36236 vulnerable 2026-06-08 07:21:01.481936 AIX Path Traversal
HIGH (8.2)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on the system.
Published: 2025-11-13T22:01:31.264Z
Updated: 2025-11-14T15:25:04.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36096 vulnerable 2026-06-08 07:21:00.943377 AIX Insufficiently Protected Credentials
CRITICAL (9)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.
Published: 2025-11-13T22:01:22.072Z
Updated: 2026-02-26T16:56:58.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52906 vulnerable 2026-06-08 06:52:16.398229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47115 vulnerable 2026-06-08 06:48:11.421713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47102 vulnerable 2026-06-08 06:48:11.370769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27273 vulnerable 2026-06-08 06:31:28.396460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27260 vulnerable 2026-06-08 06:31:28.352293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45175 vulnerable 2026-06-08 06:12:42.096680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45174 vulnerable 2026-06-08 06:12:42.096154 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45173 vulnerable 2026-06-08 06:12:42.095575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45172 vulnerable 2026-06-08 06:12:42.094672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45171 vulnerable 2026-06-08 06:12:42.094310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45170 vulnerable 2026-06-08 06:12:42.093775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45169 vulnerable 2026-06-08 06:12:42.093218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45168 vulnerable 2026-06-08 06:12:42.092476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45166 vulnerable 2026-06-08 06:12:42.089669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40371 vulnerable 2026-06-08 06:09:42.176778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28528 vulnerable 2026-06-08 06:01:11.044498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26286 vulnerable 2026-06-08 05:57:39.057106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47990 vulnerable 2026-06-08 05:50:41.148895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43849 vulnerable 2026-06-08 05:49:34.869361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43848 vulnerable 2026-06-08 05:49:34.868822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43382 vulnerable 2026-06-08 05:49:31.561944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43381 vulnerable 2026-06-08 05:49:31.561314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43380 vulnerable 2026-06-08 05:49:31.557837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41290 vulnerable 2026-06-08 05:48:30.146507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40233 vulnerable 2026-06-08 05:48:24.362405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39165 vulnerable 2026-06-08 05:47:18.264045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39164 vulnerable 2026-06-08 05:47:18.260914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36768 vulnerable 2026-06-08 05:46:07.720925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34356 vulnerable 2026-06-08 05:44:52.684056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22444 vulnerable 2026-06-08 05:40:53.758215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22350 vulnerable 2026-06-08 05:40:53.605054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38996 vulnerable 2026-06-08 05:33:48.736538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38995 vulnerable 2026-06-08 05:33:48.735739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38994 vulnerable 2026-06-08 05:33:48.735293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38993 vulnerable 2026-06-08 05:33:48.734723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38991 vulnerable 2026-06-08 05:33:48.732174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38990 vulnerable 2026-06-08 05:33:48.731617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38955 vulnerable 2026-06-08 05:33:48.645897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29862 vulnerable 2026-06-08 05:31:27.137835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29801 vulnerable 2026-06-08 05:31:27.039839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29741 vulnerable 2026-06-08 05:31:26.905666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29727 vulnerable 2026-06-08 05:31:26.886347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29693 vulnerable 2026-06-08 05:31:26.802054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4887 vulnerable 2026-06-08 05:26:41.140416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4829 vulnerable 2026-06-08 05:26:41.022039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.