4.8
Medium
CVE-2021-39024 IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting
Description
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213862.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Encryption | 5.0.0 | No fix stated |
| Guardium Data Encryption | 4.0.0 | No fix stated |
Other CVEs of Guardium Data Encryption
The 12 CVEs of Guardium Data Encryption →
CVE-2021-39027
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another…
3.0
Low
CVE-2021-39023
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when…
2.7
Low
CVE-2021-39020
IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters
2.0
Low
CVE-2021-20414
IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly…
4.4
Medium