Skip to content

Known vulnerabilities in IBM Guardium Data Encryption

Is your version affected?

CVE Summary Score Published
CVE-2021-39024 IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting 4.8 Medium May 10, 2022
CVE-2021-39027 IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another… 3.0 Low May 6, 2022
CVE-2021-39023 IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when… 2.7 Low May 6, 2022
CVE-2021-39020 IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters 2.0 Low May 5, 2022
CVE-2021-20414 IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly… 4.4 Medium Jul 12, 2021
CVE-2021-20474 IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that… 6.5 Medium Jul 7, 2021
CVE-2021-20417 IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed… 4.3 Medium Jul 7, 2021
CVE-2021-20416 IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information,… 3.7 Low Jul 7, 2021
CVE-2021-20415 IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker… 5.9 Medium Jul 7, 2021
CVE-2021-20379 IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could… 5.9 Medium Jul 7, 2021
CVE-2021-20378 IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an… 6.3 Medium Jul 7, 2021
CVE-2021-20413 IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed… 4.3 Medium Jun 28, 2021

Other IBM products