Skip to content
Sign in
6.4 Medium

CVE-2025-36125 IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting

Description

IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
Hardware Management Console 11.1.1110.0 No fix stated
Hardware Management Console 10.3.1050.0 No fix stated

Other CVEs of Hardware Management Console

The 4 CVEs of Hardware Management Console →
CVE-2024-45094 IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting 5.5 Medium CVE-2021-38930 IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a… 5.3 Medium CVE-2021-38929 IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a… 5.3 Medium
Track this CVE