CVE-2021-38930

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-04-11 · updated 2026-06-17

Description

IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-Force ID: 210331.

Affected products

IBM Hardware Management Console: 88.50.0.0, 89.10.0.0, 89.20.0.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/210331
https://www.ibm.com/support/pages/node/6570741
https://exchange.xforce.ibmcloud.com/vulnerabilities/210331
https://www.ibm.com/support/pages/node/6570741

Get alerted when CVE-2021-38930 or the next vulnerability affects your stack