3.0
Low
CVE-2021-39027 IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another…
Description
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Encryption | 5.0.0 | No fix stated |
| Guardium Data Encryption | 4.0.0 | No fix stated |
Other CVEs of Guardium Data Encryption
The 12 CVEs of Guardium Data Encryption →
CVE-2021-39024
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting
4.8
Medium
CVE-2021-39023
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when…
2.7
Low
CVE-2021-39020
IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters
2.0
Low
CVE-2021-20414
IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly…
4.4
Medium