CVE-2012-4856

The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via unspecified vectors.

• CWE-255

• http://aix.software.ibm.com/aix/efixes/security/squadrons_advisory.ascVendor Advisory
• http://www.kb.cert.org/vuls/id/194604US Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79736
• http://aix.software.ibm.com/aix/efixes/security/squadrons_advisory.ascVendor Advisory
• http://www.kb.cert.org/vuls/id/194604US Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79736

Published

Dec 20, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4847IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows r…
• CVE-2012-4848Multiple cross-site scripting (XSS) vulnerabilities in IBM L…
• CVE-2012-4850IBM WebSphere Application Server 8.5 Liberty Profile before …
• CVE-2012-4851Cross-site scripting (XSS) vulnerability in IBM WebSphere Ap…
• CVE-2012-4853Cross-site request forgery (CSRF) vulnerability in IBM WebSp…
• CVE-2012-4855Unspecified vulnerability in the web services framework in I…
• CVE-2012-4857Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 an…
• CVE-2012-4858IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1…
• CVE-2012-4859Unspecified vulnerability in IBM Tivoli Storage Manager for …
• CVE-2012-4861The web server in InfoSphere Data Replication Dashboard in I…
• CVE-2012-4862The Host Connect emulator in IBM Rational Developer for Syst…
• CVE-2012-4863IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulner…6.5