Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:vios:3.1.0:*:*:*:*:*:*:*

part: a version: 3.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductVios (60217296-7514-53fe-8112-0ee153a5adfe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36251 vulnerable 2026-06-08 07:21:01.532077 AIX Command Execution
CRITICAL (9.6)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347.
Published: 2025-11-13T22:01:13.345Z
Updated: 2026-02-26T16:56:59.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36250 vulnerable 2026-06-08 07:21:01.531322 AIX Code Execution
CRITICAL (10)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls.  This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.
Published: 2025-11-13T22:01:27.447Z
Updated: 2026-02-26T16:56:58.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36236 vulnerable 2026-06-08 07:21:01.481983 AIX Path Traversal
HIGH (8.2)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on the system.
Published: 2025-11-13T22:01:31.264Z
Updated: 2025-11-14T15:25:04.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36096 vulnerable 2026-06-08 07:21:00.945400 AIX Insufficiently Protected Credentials
CRITICAL (9)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.
Published: 2025-11-13T22:01:22.072Z
Updated: 2026-02-26T16:56:58.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29861 vulnerable 2026-06-08 05:31:27.137264 Details available
MEDIUM (6.2)
IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085.
Published: 2021-11-17T14:00:16.343Z
Updated: 2024-09-16T22:35:23.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29860 vulnerable 2026-06-08 05:31:27.135584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4788 vulnerable 2026-06-08 05:26:40.950739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.