Skip to content
Sign in
8.2 High

CVE-2025-36236 IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a…

Description

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on the system.

Affected products and versions

Product Affected versions Fixed in
AIX 7.3 No fix stated
AIX 7.2 No fix stated
VIOS 4.1 No fix stated
VIOS 3.1 No fix stated

Other CVEs of AIX

The 213 CVEs of AIX →
CVE-2026-16821 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format… 7.0 High CVE-2026-19783 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to… 6.7 Medium CVE-2026-19449 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to… 8.8 High CVE-2026-19448 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP… 6.5 Medium
Track this CVE