# IBM Security Guardium.

Every CVE that names IBM Security Guardium among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM Security Guardium privilege escalation](https://agentprime.io/advisories/CVE-2025-3473.md)
  `CVE-2025-3473` · CVE record: IBM Security Guardium · CVSS 6.7 Medium · Not analysed yet · Published 11 Jun 2025 · Tags: CWE-277
- [IBM Security Guardium information disclosure](https://agentprime.io/advisories/CVE-2025-25029.md)
  `CVE-2025-25029` · CVE record: IBM Security Guardium · CVSS 4.9 Medium · Not analysed yet · Published 28 May 2025 · Tags: CWE-116
- [IBM Security Guardium information disclosure](https://agentprime.io/advisories/CVE-2025-25026.md)
  `CVE-2025-25026` · CVE record: IBM Security Guardium · CVSS 4.3 Medium · Not analysed yet · Published 28 May 2025 · Tags: Broken access control
- [IBM Security Guardium information disclosure](https://agentprime.io/advisories/CVE-2025-25025.md)
  `CVE-2025-25025` · CVE record: IBM Security Guardium · CVSS 4.3 Medium · Not analysed yet · Published 28 May 2025 · Tags: Information disclosure
- [IBM Security Guardium cross-site scripting](https://agentprime.io/advisories/CVE-2025-3440.md)
  `CVE-2025-3440` · CVE record: IBM Security Guardium · CVSS 5.5 Medium · Not analysed yet · Published 15 May 2025 · Tags: Cross-site scripting (XSS)
- [IBM Security Guardium information disclosure](https://agentprime.io/advisories/CVE-2025-25023.md)
  `CVE-2025-25023` · CVE record: IBM Security Guardium · CVSS 4.9 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: Privilege escalation
- [IBM Security Guardium server-side request forgery](https://agentprime.io/advisories/CVE-2024-49336.md)
  `CVE-2024-49336` · CVE record: IBM Security Guardium · CVSS 6.5 Medium · Not analysed yet · Published 19 Dec 2024 · Tags: Server-side request forgery (SSRF)
- [IBM Security Guardium cross-site scripting](https://agentprime.io/advisories/CVE-2023-47710.md)
  `CVE-2023-47710` · CVE record: IBM Security Guardium · CVSS 5.4 Medium · Not analysed yet · Published 24 May 2024 · Tags: Cross-site scripting (XSS)
- [IBM Security Guardium denial of service](https://agentprime.io/advisories/CVE-2023-47717.md)
  `CVE-2023-47717` · CVE record: IBM Security Guardium · CVSS 4.4 Medium · Not analysed yet · Published 16 May 2024 · Tags: Denial of service
- [IBM Security Guardium denial of service](https://agentprime.io/advisories/CVE-2023-47711.md)
  `CVE-2023-47711` · CVE record: IBM Security Guardium · CVSS 2.7 Low · Not analysed yet · Published 11 May 2024 · Tags: Unrestricted file upload
- [IBM Security Guardium privilege escalation](https://agentprime.io/advisories/CVE-2023-47712.md)
  `CVE-2023-47712` · CVE record: IBM Security Guardium · CVSS 7.8 High · Not analysed yet · Published 11 May 2024 · Tags: Broken access control
- [IBM Security Guardium command injection](https://agentprime.io/advisories/CVE-2023-47709.md)
  `CVE-2023-47709` · CVE record: IBM Security Guardium · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 May 2024 · Tags: Command injection
- [IBM Security Guardium CSV injection](https://agentprime.io/advisories/CVE-2023-42004.md)
  `CVE-2023-42004` · CVE record: IBM Security Guardium · CVSS 8.0 High · Not analysed yet · Published 28 Nov 2023 · Tags: Other injection
- [IBM Security Guardium information disclosure](https://agentprime.io/advisories/CVE-2022-43906.md)
  `CVE-2022-43906` · CVE record: IBM Security Guardium · CVSS 3.1 Low · Not analysed yet · Published 4 Oct 2023
- [IBM Security Guardium denial of service](https://agentprime.io/advisories/CVE-2022-43903.md)
  `CVE-2022-43903` · CVE record: IBM Security Guardium · CVSS 4.3 Medium · Not analysed yet · Published 4 Sept 2023 · Tags: CWE-20
- [IBM Security Guardium information disclosure](https://agentprime.io/advisories/CVE-2022-43904.md)
  `CVE-2022-43904` · CVE record: IBM Security Guardium · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2023 · Tags: Authentication bypass
- [IBM Security Guardium SQL injection](https://agentprime.io/advisories/CVE-2023-33852.md)
  `CVE-2023-33852` · CVE record: IBM Security Guardium · CVSS 7.6 High · Not analysed yet · Published 27 Aug 2023 · Tags: SQL injection
- [IBM Security Guardium cross-site scripting](https://agentprime.io/advisories/CVE-2022-43909.md)
  `CVE-2022-43909` · CVE record: IBM Security Guardium · CVSS 4.6 Medium · Not analysed yet · Published 27 Aug 2023 · Tags: Cross-site scripting (XSS)
- [IBM Security Guardium command execution](https://agentprime.io/advisories/CVE-2022-43907.md)
  `CVE-2022-43907` · CVE record: IBM Security Guardium · CVSS 7.2 High · Not analysed yet · Published 27 Aug 2023 · Tags: Command injection
- [IBM Security Guardium information disclosure](https://agentprime.io/advisories/CVE-2023-30437.md)
  `CVE-2023-30437` · CVE record: IBM Security Guardium · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2023
- [IBM Security Guardium cross-site scripting](https://agentprime.io/advisories/CVE-2023-30436.md)
  `CVE-2023-30436` · CVE record: IBM Security Guardium · CVSS 5.5 Medium · Not analysed yet · Published 27 Aug 2023 · Tags: Cross-site scripting (XSS)
- [IBM Security Guardium cross-site scripting](https://agentprime.io/advisories/CVE-2023-30435.md)
  `CVE-2023-30435` · CVE record: IBM Security Guardium · CVSS 8.9 High · Not analysed yet · Published 27 Aug 2023 · Tags: Cross-site scripting (XSS)
- [IBM Security Guardium command execution](https://agentprime.io/advisories/CVE-2023-35893.md)
  `CVE-2023-35893` · CVE record: IBM Security Guardium · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Aug 2023 · Tags: Command injection
- [IBM Security Guardium privilege escalation](https://agentprime.io/advisories/CVE-2022-43910.md)
  `CVE-2022-43910` · CVE record: IBM Security Guardium · CVSS 8.4 High · Not analysed yet · Published 19 Jul 2023
- [IBM Security Guardium denial of service](https://agentprime.io/advisories/CVE-2022-43908.md)
  `CVE-2022-43908` · CVE record: IBM Security Guardium · CVSS 4.3 Medium · Not analysed yet · Published 19 Jul 2023 · Tags: CWE-20
- [IBM Security Guardium privilege escalation](https://agentprime.io/advisories/CVE-2022-22307.md)
  `CVE-2022-22307` · CVE record: IBM Security Guardium · CVSS 4.4 Medium · Not analysed yet · Published 15 Jun 2023 · Tags: Broken access control
- [IBM Security Guardium session fixation](https://agentprime.io/advisories/CVE-2023-0041.md)
  `CVE-2023-0041` · CVE record: IBM Security Guardium · CVSS 6.3 Medium · Not analysed yet · Published 5 Jun 2023 · Tags: Authentication bypass
- [IBM Security Guardium information disclosure](https://agentprime.io/advisories/CVE-2022-39166.md)
  `CVE-2022-39166` · CVE record: IBM Security Guardium · CVSS 4.4 Medium · Not analysed yet · Published 20 Dec 2022 · Tags: Information disclosure
- [IBM Security Guardium information disclosure](https://agentprime.io/advisories/CVE-2021-39077.md)
  `CVE-2021-39077` · CVE record: IBM Security Guardium · CVSS 4.4 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Weak cryptography or TLS
- [IBM Security Guardium 11.4 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-39074.md)
  `CVE-2021-39074` · CVE record: IBM Security Guardium · CVSS 6.1 Medium · Not analysed yet · Published 29 Jun 2022
- [IBM Security Guardium: IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read…](https://agentprime.io/advisories/CVE-2021-39078.md)
  `CVE-2021-39078` · CVE record: IBM Security Guardium · CVSS 4.1 Medium · Not analysed yet · Published 19 Apr 2022
- [IBM Security Guardium: IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms…](https://agentprime.io/advisories/CVE-2021-39076.md)
  `CVE-2021-39076` · CVE record: IBM Security Guardium · CVSS 3.7 Low · Not analysed yet · Published 19 Apr 2022
- [IBM Security Guardium: IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information…](https://agentprime.io/advisories/CVE-2021-39072.md)
  `CVE-2021-39072` · CVE record: IBM Security Guardium · CVSS 5.9 Medium · Not analysed yet · Published 19 Apr 2022
- [IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-29735.md)
  `CVE-2021-29735` · CVE record: IBM Security Guardium · CVSS 4.8 Medium · Not analysed yet · Published 8 Nov 2021
- [IBM Security Guardium: IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information…](https://agentprime.io/advisories/CVE-2021-20377.md)
  `CVE-2021-20377` · CVE record: IBM Security Guardium · CVSS 2.7 Low · Not analysed yet · Published 23 Sept 2021
- [IBM Security Guardium: IBM Security Guardium 11.3 contains hard-coded credentials…](https://agentprime.io/advisories/CVE-2020-4690.md)
  `CVE-2020-4690` · CVE record: IBM Security Guardium · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2021
- [IBM Security Guardium: IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain…](https://agentprime.io/advisories/CVE-2021-29773.md)
  `CVE-2021-29773` · CVE record: IBM Security Guardium · CVSS 5.4 Medium · Not analysed yet · Published 15 Sept 2021
- [IBM Security Guardium: IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive…](https://agentprime.io/advisories/CVE-2021-20433.md)
  `CVE-2021-20433` · CVE record: IBM Security Guardium · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a…](https://agentprime.io/advisories/CVE-2021-20427.md)
  `CVE-2021-20427` · CVE record: IBM Security Guardium · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 could disclose sensitive information due to reliance on…](https://agentprime.io/advisories/CVE-2021-20420.md)
  `CVE-2021-20420` · CVE record: IBM Security Guardium · CVSS 4.3 Medium · Not analysed yet · Published 11 Aug 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 does not require that users should have strong passwords by…](https://agentprime.io/advisories/CVE-2021-20418.md)
  `CVE-2021-20418` · CVE record: IBM Security Guardium · CVSS 4.7 Medium · Not analysed yet · Published 11 Aug 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute…](https://agentprime.io/advisories/CVE-2021-20557.md)
  `CVE-2021-20557` · CVE record: IBM Security Guardium · CVSS 7.2 High · Not analysed yet · Published 24 May 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information…](https://agentprime.io/advisories/CVE-2021-20428.md)
  `CVE-2021-20428` · CVE record: IBM Security Guardium · CVSS 5.3 Medium · Not analysed yet · Published 24 May 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 contains hard-coded credentials…](https://agentprime.io/advisories/CVE-2021-20426.md)
  `CVE-2021-20426` · CVE record: IBM Security Guardium · CVSS 5.9 Medium · Not analysed yet · Published 24 May 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could…](https://agentprime.io/advisories/CVE-2021-20419.md)
  `CVE-2021-20419` · CVE record: IBM Security Guardium · CVSS 6.8 Medium · Not analysed yet · Published 24 May 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read…](https://agentprime.io/advisories/CVE-2021-20389.md)
  `CVE-2021-20389` · CVE record: IBM Security Guardium · CVSS 5.1 Medium · Not analysed yet · Published 24 May 2021
- [IBM Security Guardium 11.2 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20386.md)
  `CVE-2021-20386` · CVE record: IBM Security Guardium · CVSS 6.1 Medium · Not analysed yet · Published 24 May 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute…](https://agentprime.io/advisories/CVE-2021-20385.md)
  `CVE-2021-20385` · CVE record: IBM Security Guardium · CVSS 8.4 High · Not analysed yet · Published 24 May 2021
- [IBM Security Guardium 11.2 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2020-4990.md)
  `CVE-2020-4990` · CVE record: IBM Security Guardium · CVSS 7.6 High · Not analysed yet · Published 24 May 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than…](https://agentprime.io/advisories/CVE-2020-4184.md)
  `CVE-2020-4184` · CVE record: IBM Security Guardium · CVSS 5.8 Medium · Not analysed yet · Published 15 Mar 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to…](https://agentprime.io/advisories/CVE-2020-4952.md)
  `CVE-2020-4952` · CVE record: IBM Security Guardium · CVSS 8.8 High · Not analysed yet · Published 27 Jan 2021
- [IBM Security Guardium: IBM Security Guardium 11.2 discloses sensitive information in the response headers that…](https://agentprime.io/advisories/CVE-2020-4189.md)
  `CVE-2020-4189` · CVE record: IBM Security Guardium · CVSS 4.3 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2020-4921.md)
  `CVE-2020-4921` · CVE record: IBM Security Guardium · CVSS 7.6 High · Not analysed yet · Published 20 Jan 2021
- [IBM Security Guardium: IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary…](https://agentprime.io/advisories/CVE-2020-4688.md)
  `CVE-2020-4688` · CVE record: IBM Security Guardium · CVSS 5.9 Medium · Not analysed yet · Published 20 Jan 2021
- [IBM Security Guardium 11.2 is vulnerable to CVS Injection.](https://agentprime.io/advisories/CVE-2020-4689.md)
  `CVE-2020-4689` · CVE record: IBM Security Guardium · CVSS 6.8 Medium · Not analysed yet · Published 12 Oct 2020
- [IBM Security Guardium 11.2 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4681.md)
  `CVE-2020-4681` · CVE record: IBM Security Guardium · CVSS 5.4 Medium · Not analysed yet · Published 12 Oct 2020
- [IBM Security Guardium 11.2 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4680.md)
  `CVE-2020-4680` · CVE record: IBM Security Guardium · CVSS 5.4 Medium · Not analysed yet · Published 12 Oct 2020
- [IBM Security Guardium 11.2 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4679.md)
  `CVE-2020-4679` · CVE record: IBM Security Guardium · CVSS 4.8 Medium · Not analysed yet · Published 12 Oct 2020
- [IBM Security Guardium: IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read…](https://agentprime.io/advisories/CVE-2020-4678.md)
  `CVE-2020-4678` · CVE record: IBM Security Guardium · CVSS 4.9 Medium · Not analysed yet · Published 12 Oct 2020
- [IBM Security Guardium: IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain…](https://agentprime.io/advisories/CVE-2018-1501.md)
  `CVE-2018-1501` · CVE record: IBM Security Guardium · CVSS 5.3 Medium · Not analysed yet · Published 26 Aug 2020

Older: <https://agentprime.io/advisories/technology/ibm-security-guardium.md?cursor=WyIyMDIwLTA4LTI2VDE5OjAwOjM1Ljk5ODAwMFoiLCJDVkUtMjAxOC0xNTAxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-security-guardium>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-security-guardium/>. Everything for agents: <https://agentprime.io/llms.txt>.