Skip to content

Product

ibm smartcloud provisioning vulnerabilities

3 published CVES affecting ibm smartcloud provisioning, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
2
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
2

Latest ibm smartcloud provisioning CVEs

Newest publication first

  1. CVE-2014-7169 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possi...

    Published
    CriticalCVSS 9.8 EPSS 99.9% CISA KEV added 2022-01-28 Exploited in the wild Public exploit PoC

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vect...

  2. CVE-2014-6271 GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as...

    Published
    CriticalCVSS 9.8 EPSS 100.0% CISA KEV added 2022-01-28 Exploited in the wild Framework module Public exploit PoC

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the...

  3. CVE-2013-5455 IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a....

    Published
    MediumCVSS 4.9 EPSS 0.86%

    IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a deployer.virtualsystems[#].delete command.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.