Skip to content

Known vulnerabilities in IBM Security Guardium

Is your version affected?

CVE Summary Score Published
CVE-2025-3473 IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure… 6.7 Medium Jun 11, 2025
CVE-2025-25029 IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping… 4.9 Medium May 28, 2025
CVE-2025-25026 IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect… 4.3 Medium May 28, 2025
CVE-2025-25025 IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error… 4.3 Medium May 28, 2025
CVE-2025-3440 IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting 5.5 Medium May 15, 2025
CVE-2025-25023 IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect… 4.9 Medium Apr 9, 2025
CVE-2024-49336 IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF) 6.5 Medium Dec 19, 2024
CVE-2023-47710 IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting 5.4 Medium May 24, 2024
CVE-2023-47717 IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial… 4.4 Medium May 16, 2024
CVE-2023-47711 IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow an authenticated user to upload files that would cause a… 2.7 Low May 11, 2024
CVE-2023-47712 IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a local user to gain elevated privileges on the system… 7.8 High May 11, 2024
CVE-2023-47709 IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a remote authenticated attacker to execute arbitrary… 9.1 Critical May 11, 2024
CVE-2023-42004 IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection 8.0 High Nov 28, 2023
CVE-2022-43906 IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a… 3.1 Low Oct 4, 2023
CVE-2022-43903 IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due… 4.3 Medium Sep 4, 2023
CVE-2022-43904 IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of… 7.5 High Aug 27, 2023
CVE-2023-33852 IBM Security Guardium 11.4 is vulnerable to SQL injection 7.6 High Aug 27, 2023
CVE-2022-43909 IBM Security Guardium 11.4 is vulnerable to cross-site scripting 4.6 Medium Aug 27, 2023
CVE-2022-43907 IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by… 7.2 High Aug 27, 2023
CVE-2023-30437 IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a… 5.3 Medium Aug 27, 2023
CVE-2023-30436 IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting 5.5 Medium Aug 27, 2023
CVE-2023-30435 IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting 8.9 High Aug 27, 2023
CVE-2023-35893 IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary… 9.9 Critical Aug 16, 2023
CVE-2022-43910 IBM Security Guardium 11.3 could allow a local user to escalate their privileges due to improper permission controls 8.4 High Jul 19, 2023
CVE-2022-43908 IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input… 4.3 Medium Jul 19, 2023

Other IBM products