4.3
Medium
CVE-2012-3340 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation…
Description
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| InfoSphere Guardium | 8.2 | No fix stated |
| InfoSphere Guardium | 8.01 | No fix stated |
| InfoSphere Guardium | 8.0 | No fix stated |
Other CVEs of InfoSphere Guardium
The 5 CVEs of InfoSphere Guardium →
CVE-2012-3341
IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation…
6.4
Medium
CVE-2012-3338
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by…
3.7
Low
CVE-2012-3337
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system
5.3
Medium
CVE-2012-3336
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection
6.3
Medium