4.8
Moyenne
CVE-2021-39024 IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting
Description
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213862.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Guardium Data Encryption | 5.0.0 | Pas de correctif indiqué |
| Guardium Data Encryption | 4.0.0 | Pas de correctif indiqué |
Autres CVE de Guardium Data Encryption
Les 12 CVE de Guardium Data Encryption →
CVE-2021-39027
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another…
3.0
Faible
CVE-2021-39023
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when…
2.7
Faible
CVE-2021-39020
IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters
2.0
Faible
CVE-2021-20414
IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly…
4.4
Moyenne