| CVE-2022-22307 |
IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect…
|
4.4
Medium
|
Jun 15, 2023 |
| CVE-2023-0041 |
IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration
|
6.3
Medium
|
Jun 5, 2023 |
| CVE-2022-39166 |
IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response
|
4.4
Medium
|
Dec 20, 2022 |
| CVE-2021-39077 |
IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can…
|
4.4
Medium
|
Nov 3, 2022 |
| CVE-2021-39074 |
IBM Security Guardium 11.4 is vulnerable to cross-site scripting
|
6.1
Medium
|
Jun 29, 2022 |
| CVE-2021-39078 |
IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user
|
4.1
Medium
|
Apr 19, 2022 |
| CVE-2021-39076 |
IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to…
|
3.7
Low
|
Apr 19, 2022 |
| CVE-2021-39072 |
IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to…
|
5.9
Medium
|
Apr 19, 2022 |
| CVE-2021-29735 |
IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting
|
4.8
Medium
|
Nov 8, 2021 |
| CVE-2021-20377 |
IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a detailed technical error…
|
2.7
Low
|
Sep 23, 2021 |
| CVE-2020-4690 |
IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for…
|
7.5
High
|
Sep 23, 2021 |
| CVE-2021-29773 |
IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or…
|
5.4
Medium
|
Sep 15, 2021 |
| CVE-2021-20433 |
IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in…
|
6.5
Medium
|
Sep 15, 2021 |
| CVE-2021-20427 |
IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute…
|
5.3
Medium
|
Aug 11, 2021 |
| CVE-2021-20420 |
IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in…
|
4.3
Medium
|
Aug 11, 2021 |
| CVE-2021-20418 |
IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier…
|
4.7
Medium
|
Aug 11, 2021 |
| CVE-2021-20557 |
IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by…
|
7.2
High
|
May 24, 2021 |
| CVE-2021-20428 |
IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error…
|
5.3
Medium
|
May 24, 2021 |
| CVE-2021-20426 |
IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for…
|
5.9
Medium
|
May 24, 2021 |
| CVE-2021-20419 |
IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
|
6.8
Medium
|
May 24, 2021 |
| CVE-2021-20389 |
IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user
|
5.1
Medium
|
May 24, 2021 |
| CVE-2021-20386 |
IBM Security Guardium 11.2 is vulnerable to cross-site scripting
|
6.1
Medium
|
May 24, 2021 |
| CVE-2021-20385 |
IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system
|
8.4
High
|
May 24, 2021 |
| CVE-2020-4990 |
IBM Security Guardium 11.2 is vulnerable to SQL injection
|
7.6
High
|
May 24, 2021 |
| CVE-2020-4184 |
IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required,…
|
5.8
Medium
|
Mar 15, 2021 |