What’s Vulnerable › Vulnerabilities

CVE-2014-0882

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-25 · updated 2026-06-17
• Weakness: CWE-200

Description

Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data (FFDC). IBM X-Force ID: 91149.

Affected products

• IBM Integrated Management Module Firmware: 3.50, 3.55, 3.56, 3.65, 3.67

References

• https://support.lenovo.com/us/en/solutions/ht114525
• https://www.ibm.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-the-integrated-management-module-ii-imm2-cve-2014-0882/
• https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094726
• https://support.lenovo.com/us/en/solutions/ht114525
• https://www.ibm.com/blogs/psirt/security-bulletin-account-specific-information-likely-to-be-present-in-service-advisor-data-ffdc-on-the-integrated-management-module-ii-imm2-cve-2014-0882/
• https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5094726

Get alerted when CVE-2014-0882 or the next vulnerability affects your stack