Advisories · Technology

IBM Security Guardium.

Every CVE that names IBM Security Guardium among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-4186 CVE record

CVSS 5.3 Medium

IBM Security Guardium: IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the…
- IBM Security Guardium
Not analysed yet 30 Jul 2020
CVE-2020-4185 CVE record

CVSS 5.9 Medium

IBM Security Guardium: IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic…
- IBM Security Guardium
Not analysed yet 30 Jul 2020
CVE-2020-4188 CVE record

CVSS 5.3 Medium

IBM Security Guardium: IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a…
- IBM Security Guardium
Not analysed yet 23 Jun 2020
CVE-2020-4193 CVE record

CVSS 4.4 Medium

IBM Security Guardium: IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a…
- IBM Security Guardium
Not analysed yet 4 Jun 2020
CVE-2020-4191 CVE record

CVSS 4.1 Medium

IBM Security Guardium: IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could…
- IBM Security Guardium
Not analysed yet 4 Jun 2020
CVE-2020-4183 CVE record

CVSS 6.1 Medium

IBM Security Guardium 11.1 is vulnerable to cross-site scripting.
- IBM Security Guardium
Not analysed yet 4 Jun 2020
CVE-2020-4307 CVE record

CVSS 6.5 Medium

IBM Security Guardium: IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to…
- IBM Security Guardium
Not analysed yet 3 Jun 2020
CVE-2020-4190 CVE record

CVSS 4.1 Medium

IBM Security Guardium: IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials…
- IBM Security Guardium
Not analysed yet 3 Jun 2020
CVE-2020-4187 CVE record

CVSS 5.3 Medium

IBM Security Guardium: IBM Security Guardium 11.1 could disclose sensitive information on the login page that…
- IBM Security Guardium
Not analysed yet 3 Jun 2020
CVE-2020-4182 CVE record

CVSS 6.1 Medium

IBM Security Guardium 11.1 is vulnerable to cross-site scripting.
- IBM Security Guardium
Not analysed yet 3 Jun 2020
CVE-2020-4180 CVE record

CVSS 8.8 High

IBM Security Guardium: IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute…
- IBM Security Guardium
Not analysed yet 3 Jun 2020
CVE-2020-4177 CVE record

CVSS 6.8 Medium

IBM Security Guardium: IBM Security Guardium 11.1 contains hard-coded credentials…
- IBM Security Guardium
Not analysed yet 3 Jun 2020
CVE-2019-4422 CVE record

CVSS 8.8 High

IBM Security Guardium: IBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which…
- IBM Security Guardium
Not analysed yet 3 Oct 2019
CVE-2019-4292 CVE record

CVSS 8.8 High

IBM Security Guardium: IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files…
- IBM Security Guardium
Not analysed yet 2 Jul 2019
CVE-2018-1891 CVE record

CVSS 5.4 Medium

IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting.
- IBM Security Guardium
Not analysed yet 17 Dec 2018
CVE-2018-1889 CVE record

CVSS 5.4 Medium

IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting.
- IBM Security Guardium
Not analysed yet 17 Dec 2018
CVE-2017-1597 CVE record

CVSS 5.9 Medium

IBM Security Guardium: IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4…
- IBM Security Guardium
Not analysed yet 17 Dec 2018
CVE-2017-1272 CVE record

CVSS 3.7 Low

IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters.
- IBM Security Guardium
Not analysed yet 17 Dec 2018
CVE-2017-1265 CVE record

CVSS 3.7 Low

IBM Security Guardium: IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4…
- IBM Security Guardium
Not analysed yet 17 Dec 2018
CVE-2018-1818 CVE record

CVSS 5.9 Medium

IBM Security Guardium: IBM Security Guardium 10 and 10.5 contains hard-coded credentials…
- IBM Security Guardium
Not analysed yet 13 Dec 2018
CVE-2018-1817 CVE record

CVSS 6.1 Medium

IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting.
- IBM Security Guardium
Not analysed yet 13 Dec 2018
CVE-2017-1268 CVE record

CVSS 5.9 Medium

IBM Security Guardium: IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that…
- IBM Security Guardium
Not analysed yet 13 Dec 2018
CVE-2018-1509 CVE record

CVSS 3.7 Low

IBM Security Guardium: IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates…
- IBM Security Guardium
Not analysed yet 2 Oct 2018
CVE-2018-1498 CVE record

CVSS 6.2 Medium

IBM Security Guardium: IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which…
- IBM Security Guardium
Not analysed yet 2 Oct 2018
CVE-2017-1255 CVE record

IBM Security Guardium: IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 uses weaker than expected…
- IBM Security Guardium
Not analysed yet 2 May 2018
CVE-2018-1368 CVE record

IBM Security Guardium: IBM Security Guardium Database Activity Monitor 9.0, 9.1…
- IBM Security Guardium
Not analysed yet 9 Feb 2018
CVE-2017-1757 CVE record

IBM Security Guardium 10.0 is vulnerable to SQL injection.
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1600 CVE record

IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting.
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1598 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected…
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1596 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to…
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1595 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to…
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1270 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 does not renew a session variable after a successful…
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1266 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 specifies permissions for a security-critical resource in a…
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1262 CVE record

IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks.
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1261 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 stores potentially sensitive information in log files that…
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1257 CVE record

IBM Security Guardium 10.0 discloses sensitive information to unauthorized users.
- IBM Security Guardium
Not analysed yet 20 Dec 2017
CVE-2017-1271 CVE record

IBM Security Guardium: IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and…
- IBM Security Guardium
Not analysed yet 7 Dec 2017
CVE-2017-1267 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 and 10.1 processes patches…
- IBM Security Guardium
Not analysed yet 21 Jul 2017
CVE-2017-1264 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors…
- IBM Security Guardium
Not analysed yet 5 Jul 2017
CVE-2017-1254 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack…
- IBM Security Guardium
Not analysed yet 5 Jul 2017
CVE-2017-1253 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute…
- IBM Security Guardium
Not analysed yet 5 Jul 2017
CVE-2017-1269 CVE record

IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection.
- IBM Security Guardium
Not analysed yet 5 Jul 2017
CVE-2017-1258 CVE record

IBM Security Guardium: IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a…
- IBM Security Guardium
Not analysed yet 5 Jul 2017
CVE-2017-1256 CVE record

IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting.
- IBM Security Guardium
Not analysed yet 5 Jul 2017
CVE-2016-0238 CVE record

IBM Security Guardium: IBM Security Guardium 9.0, 9.1, 9.5, 10.0…
- IBM Security Guardium
Not analysed yet 5 Jul 2017
CVE-2017-1122 CVE record

IBM Security Guardium: IBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a…
- IBM Security Guardium
Not analysed yet 20 Apr 2017