AMI
- Total products in the ecosystem
- 8
- Total vulnerabilities (90 days)
- 6
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, AMI recorded 6 security vulnerabilities in the last 90 days across 1 products, including 5 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, AptioV had the most security vulnerabilities in the AMI ecosystem, with 6 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-0893Uncleared Password Keystrokes VulnerabilityCVE-2025-58774UEFI OOB Write and Buffer Overflow VulnerabilitiesCVE-2025-58773UEFI OOB Write and Buffer Overflow VulnerabilitiesCVE-2025-58772UEFI OOB Write and Buffer Overflow VulnerabilitiesCVE-2025-58771UEFI OOB Write and Buffer Overflow Vulnerabilities| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-0893Uncleared Password Keystrokes Vulnerability | Exploitation statusNot exploited | FixYes |
| Published10/13/2026 |
| SeverityMedium |
CVE-2025-58774UEFI OOB Write and Buffer Overflow Vulnerabilities | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published10/13/2026 | SeverityHigh |
|---|
CVE-2025-58773UEFI OOB Write and Buffer Overflow Vulnerabilities | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published10/13/2026 | SeverityHigh |
|---|
CVE-2025-58772UEFI OOB Write and Buffer Overflow Vulnerabilities | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published10/13/2026 | SeverityHigh |
|---|
CVE-2025-58771UEFI OOB Write and Buffer Overflow Vulnerabilities | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-33197BDS Module Bypass Secure Boot Advisory | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published09/08/2026 | SeverityHigh |
|---|
CVE-2025-58770TCG2 TPM RT Not Locked Issue | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published12/12/2025 | SeverityHigh |
|---|
CVE-2025-33044exFat Memory Corruption Issue | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published10/14/2025 | SeverityMedium |
|---|
CVE-2025-22833FixupArray Pointer Validation in NTFS | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published10/14/2025 | SeverityMedium |
|---|
CVE-2025-22832Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published10/14/2025 | SeverityMedium |
|---|
CVE-2025-22831Buffer Overflow in NTFS when parsing the VOLUME_NAME | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published10/14/2025 | SeverityMedium |
|---|
CVE-2025-33045Legacy Serial Redirection SMRAM Vulnerabilities | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published09/09/2025 | SeverityHigh |
|---|
CVE-2025-22834ThirdPartyVideo SetVariable Vulnerability | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published08/12/2025 | SeverityMedium |
|---|
CVE-2025-22830SmiFlash Race Condition Vulnerability | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published08/12/2025 | SeverityHigh |
|---|
CVE-2025-33043SMM buffer Integrity | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published05/29/2025 | SeverityMedium |
|---|
CVE-2024-42446TOCTOU in SmmWhea | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published05/13/2025 | SeverityHigh |
|---|
CVE-2024-54085Redfish Authentication Bypass | Exploitation statusKEV | FixYes | Affected productMegaRAC-SPx | Published03/11/2025 | SeverityCritical |
|---|
CVE-2024-54084SMM Arbitrary Write via TOCTOU Vulnerability | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published03/11/2025 | SeverityHigh |
|---|
CVE-2024-33659BiosGuard Buffer Overflow and TOCTOU Vulnerability | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published02/11/2025 | SeverityMedium |
|---|
CVE-2024-42444TOCTOU Race Condition between DMA and SMM | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published01/14/2025 | SeverityHigh |
|---|
CVE-2024-42442Runtime Service Access outside SMRAM | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published11/12/2024 | SeverityHigh |
|---|
CVE-2024-33660Potential Firmware update without integrity check | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published11/12/2024 | SeverityMedium |
|---|
CVE-2024-33658Buffer Overflow Vulnerability In OFBD | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published11/12/2024 | SeverityMedium |
|---|
CVE-2024-2315SMM arbitrary code execution in Overclock | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published11/12/2024 | SeverityMedium |
|---|
CVE-2024-33657Smm Callout in SmmComputrace Module | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published08/21/2024 | SeverityHigh |
|---|
CVE-2024-33656Memory Leak in SmmComuptrace Module | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published08/21/2024 | SeverityHigh |
|---|
CVE-2023-37297heap memory overflow | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published01/09/2024 | SeverityHigh |
|---|
CVE-2023-37296Stack-based Buffer Overflow | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published01/09/2024 | SeverityHigh |
|---|
CVE-2023-37295Heap-based Buffer Overflow | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published01/09/2024 | SeverityHigh |
|---|
CVE-2023-37294Heap-based Buffer Overflow | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published01/09/2024 | SeverityHigh |
|---|
CVE-2023-37293stack-based buffer overflow | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published01/09/2024 | SeverityCritical |
|---|
CVE-2023-34333Untrusted Pointer Dereference | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published01/09/2024 | SeverityHigh |
|---|
CVE-2023-34332Untrusted Pointer Dereference in BMC | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published01/09/2024 | SeverityHigh |
|---|
CVE-2023-3043Stack-based Buffer Overflow BMC | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published01/09/2024 | SeverityCritical |
|---|
CVE-2023-39539Failure when uploading a Logo image file | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published12/06/2023 | SeverityHigh |
|---|
CVE-2023-39538Failure when uploading a Logo image file | Exploitation statusNot exploited | FixYes | Affected productAptioV | Published12/06/2023 | SeverityHigh |
|---|
CVE-2023-39537Improper input validation in BIOS TCG2 | Exploitation statusNot exploited | FixNo | Affected productAptioV | Published11/14/2023 | SeverityHigh |
|---|
CVE-2023-39536Improper input validation in BIOS OFBD | Exploitation statusNot exploited | FixNo | Affected productAptioV | Published11/14/2023 | SeverityHigh |
|---|
CVE-2023-39535Improper input validation in BIOS | Exploitation statusNot exploited | FixNo | Affected productAptioV | Published11/14/2023 | SeverityHigh |
|---|
CVE-2023-34470Improper access control | Exploitation statusNot exploited | FixNo | Affected productAptioV | Published09/12/2023 | SeverityMedium |
|---|
CVE-2023-34469Cold Rest Vulnerabiltiy | Exploitation statusNot exploited | FixNo | Affected productAptioV | Published09/12/2023 | SeverityMedium |
|---|
CVE-2023-34330Code injection via Dynamic Redfish Extension interface | Exploitation statusNot exploited | FixYes | Affected productMegaRAC SPx12 | Published07/18/2023 | SeverityHigh |
|---|
CVE-2023-34329Authentication Bypass via HTTP Header Spoofing | Exploitation statusNot exploited | FixYes | Affected productMegaRAC SPx12 | Published07/18/2023 | SeverityCritical |
|---|
CVE-2023-34473Usage of Hard-coded Credentials | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published07/05/2023 | SeverityMedium |
|---|
CVE-2023-34472CVE-2023-34472 | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published07/05/2023 | SeverityMedium |
|---|
CVE-2023-34471Missing Cryptographic Step | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published07/05/2023 | SeverityMedium |
|---|
CVE-2023-34338hard coded cryptographic key | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published07/05/2023 | SeverityHigh |
|---|
CVE-2023-34337Inadequate Encryption Strength | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published07/05/2023 | SeverityHigh |
|---|
CVE-2023-34345CVE-2023-34345 | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published06/12/2023 | SeverityMedium |
|---|
CVE-2023-34344A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username | Exploitation statusNot exploited | FixYes | Affected productMegaRAC_SPx | Published06/12/2023 | SeverityMedium |
|---|
66 Results | Page 1 of 2