Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-96146 (GCVE-0-2026-96146)

Vulnerability from cvelistv5 – Published: 2026-11-08 19:44 – Updated: 2026-11-08 19:44

Title

Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management

Summary

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

ibm CNA

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7289655	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	SevOne Network Performance Management	Affected: 7.0.0 , ≤ 8.2.2 (semver) cpe:2.3:a:ibm:sevone_network_performance_management:7.0.0:::::::* cpe:2.3:a:ibm:sevone_network_performance_management:8.2.2:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:sevone_network_performance_management:7.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:sevone_network_performance_management:8.2.2:*:*:*:*:*:*:*"
          ],
          "product": "SevOne Network Performance Management",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "8.2.2",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.\u003c/p\u003e"
            }
          ],
          "value": "IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-08T19:44:23.101Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7289655"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cem\u003e\u003cstrong\u003eIBM SevOne Network Performance Management has previously remediated the vulnerabilities listed in this bulletin through product maintenance and updates.\u00a0\u003c/strong\u003e\u003c/em\u003e\u003c/div\u003e\u003cdiv\u003e\u003cem\u003eThis security bulletin is being published as a historical reference to align with current security disclosure practices and does not contain new findings.\u003c/em\u003e\u003c/div\u003e\u003cdiv\u003e\u003cp\u003eIBM strongly recommends addressing these vulnerabilities now by upgrading. Please refer to the instructions below for installation steps for your specific version.\u003c/p\u003e\u003cfigure\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct(s)\u003c/td\u003e\u003ctd\u003e\u003cp\u003eLatest Version(s)\u00a0\u003c/p\u003e\u003c/td\u003e\u003ctd\u003eRemediation/Fix/Instructions\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM SevOne Network Performance Management (DI)\u003c/td\u003e\u003ctd\u003e8.2.4\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SevOne+Network+Performance+Management\u0026amp;fixids=8.2.0-IBM-SevOne-DI_8.2.4\u0026amp;source=SAR\" rel=\"noopener noreferrer nofollow\"\u003eDownload\u003c/a\u003e and refer to the \u003ca href=\"https://www.ibm.com/docs/en/sevone-npm/8.2.0?topic=insight-data-82-release-notes\" rel=\"nofollow\"\u003erelease notes\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM SevOne Network Performance Management (NMS)\u003c/td\u003e\u003ctd\u003e8.2.3\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SevOne+Network+Performance+Management\u0026amp;fixids=8.2.0-IBM-SevOne-NMS_8.2.3\u0026amp;source=dbluesearch\u0026amp;function=fixId\u0026amp;parent=ibm/Other%20software\" rel=\"noopener noreferrer nofollow\"\u003eDownload\u003c/a\u003e and refer to the \u003ca href=\"https://www.ibm.com/docs/en/sevone-npm/8.2.0?topic=nms-82-release-notes\" rel=\"noopener noreferrer nofollow\"\u003erelease notes\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM SevOne Network Performance Management (SD-WAN)\u003c/td\u003e\u003ctd\u003e8.2.3\u003c/td\u003e\u003ctd\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SevOne+Network+Performance+Management\u0026amp;fixids=8.2.0-IBM-SevOne-SDWAN_8.2.3\u0026amp;source=SAR\u0026amp;function=fixId\u0026amp;parent=ibm/Other%20software\" rel=\"noopener noreferrer nofollow\"\u003eDownload\u003c/a\u003e and refer to the \u003ca href=\"https://www.ibm.com/docs/en/sevone-npm/8.2.0?topic=wan-sd-82-release-notes\" rel=\"noopener noreferrer nofollow\"\u003erelease notes\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003c/figure\u003e\u003c/div\u003e"
            }
          ],
          "value": "IBM SevOne Network Performance Management has previously remediated the vulnerabilities listed in this bulletin through product maintenance and updates.\u00a0\n\nThis security bulletin is being published as a historical reference to align with current security disclosure practices and does not contain new findings.\n\n\n\nIBM strongly recommends addressing these vulnerabilities now by upgrading. Please refer to the instructions below for installation steps for your specific version.\n\nProduct(s)\n\nLatest Version(s)\u00a0\n\nRemediation/Fix/InstructionsIBM SevOne Network Performance Management (DI)8.2.4 Download https://www.ibm.com/support/fixcentral/quickorder  and refer to the  release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0 IBM SevOne Network Performance Management (NMS)8.2.3 Download https://www.ibm.com/support/fixcentral/swg/selectFixes  and refer to the  release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0 IBM SevOne Network Performance Management (SD-WAN)8.2.3 Download https://www.ibm.com/support/fixcentral/swg/selectFixes  and refer to the  release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0"
        }
      ],
      "title": "Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-96146",
    "datePublished": "2026-11-08T19:44:23.101Z",
    "dateReserved": "2026-09-22T18:37:41.901Z",
    "dateUpdated": "2026-11-08T19:44:23.101Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-95867 (GCVE-0-2026-95867)

Vulnerability from cvelistv5 – Published: 2026-11-08 19:44 – Updated: 2026-11-09 01:21

Title

Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management

Summary

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-09 01:20 UTC

CWE

CWE-121 - Stack-based Buffer Overflow