IBM Advanced Management Module vulnerabilities

9 CVEs affecting IBM Advanced Management Module, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0860, published 2014-07-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-1460, published 2010-04-16. Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days. The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of…
CVE-2010-2656, published 2010-07-08. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient…
CVE-2010-2655, published 2010-07-08. Medium severity, CVSS 4.0. EPSS: 2.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and…
CVE-2010-2654, published 2010-07-08. Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow…
CVE-2009-1288, published 2009-04-13. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject…
CVE-2009-1289, published 2009-04-13. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of…
CVE-2009-1290, published 2009-04-13. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H…
CVE-2014-0860, published 2014-07-07. Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days. The firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the firmware before 1.43 in IBM Integrated Management Module (IMM), and the firmware before 4.15 in IBM Integrated…
CVE-2013-4007, published 2013-08-16. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote…