Skip to content

Known vulnerabilities in IBM Security Guardium

Is your version affected?

CVE Summary Score Published
CVE-2020-4952 IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control 8.8 High Jan 27, 2021
CVE-2020-4189 IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks… 4.3 Medium Jan 27, 2021
CVE-2020-4921 IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection 7.6 High Jan 20, 2021
CVE-2020-4688 IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an… 5.9 Medium Jan 20, 2021
CVE-2020-4689 IBM Security Guardium 11.2 is vulnerable to CVS Injection 6.8 Medium Oct 12, 2020
CVE-2020-4681 IBM Security Guardium 11.2 is vulnerable to cross-site scripting 5.4 Medium Oct 12, 2020
CVE-2020-4680 IBM Security Guardium 11.2 is vulnerable to cross-site scripting 5.4 Medium Oct 12, 2020
CVE-2020-4678 IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would… 4.9 Medium Oct 12, 2020
CVE-2020-4679 IBM Security Guardium 11.2 is vulnerable to cross-site scripting 4.8 Medium Oct 12, 2020
CVE-2018-1501 IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to… 5.3 Medium Aug 26, 2020
CVE-2020-4186 IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in… 5.3 Medium Jul 30, 2020
CVE-2020-4185 IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an… 5.9 Medium Jul 30, 2020
CVE-2020-4188 IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends… 5.3 Medium Jun 23, 2020
CVE-2020-4193 IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote attacker to brute… 4.4 Medium Jun 4, 2020
CVE-2020-4191 IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… 4.1 Medium Jun 4, 2020
CVE-2020-4183 IBM Security Guardium 11.1 is vulnerable to cross-site scripting 6.1 Medium Jun 4, 2020
CVE-2020-4307 IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause… 6.5 Medium Jun 3, 2020
CVE-2020-4190 IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key,… 4.1 Medium Jun 3, 2020
CVE-2020-4187 IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks… 5.3 Medium Jun 3, 2020
CVE-2020-4182 IBM Security Guardium 11.1 is vulnerable to cross-site scripting 6.1 Medium Jun 3, 2020
CVE-2020-4180 IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system 8.8 High Jun 3, 2020
CVE-2020-4177 IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for… 6.8 Medium Jun 3, 2020
CVE-2019-4422 IBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could allow an authenticated… 8.8 High Oct 3, 2019
CVE-2019-4292 IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to… 8.8 High Jul 2, 2019
CVE-2018-1891 IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting 5.4 Medium Dec 17, 2018

Other IBM products