Aller au contenu

Vulnérabilités connues pour IBM Security Guardium

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2022-22307 IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect… 4.4 Moyenne 15 juin 2023
CVE-2023-0041 IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration 6.3 Moyenne 5 juin 2023
CVE-2022-39166 IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response 4.4 Moyenne 20 déc. 2022
CVE-2021-39077 IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can… 4.4 Moyenne 3 nov. 2022
CVE-2021-39074 IBM Security Guardium 11.4 is vulnerable to cross-site scripting 6.1 Moyenne 29 juin 2022
CVE-2021-39078 IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user 4.1 Moyenne 19 avr. 2022
CVE-2021-39076 IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to… 3.7 Faible 19 avr. 2022
CVE-2021-39072 IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to… 5.9 Moyenne 19 avr. 2022
CVE-2021-29735 IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting 4.8 Moyenne 8 nov. 2021
CVE-2021-20377 IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a detailed technical error… 2.7 Faible 23 sept. 2021
CVE-2020-4690 IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for… 7.5 Élevée 23 sept. 2021
CVE-2021-29773 IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or… 5.4 Moyenne 15 sept. 2021
CVE-2021-20433 IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in… 6.5 Moyenne 15 sept. 2021
CVE-2021-20427 IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute… 5.3 Moyenne 11 août 2021
CVE-2021-20420 IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in… 4.3 Moyenne 11 août 2021
CVE-2021-20418 IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier… 4.7 Moyenne 11 août 2021
CVE-2021-20557 IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by… 7.2 Élevée 24 mai 2021
CVE-2021-20428 IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error… 5.3 Moyenne 24 mai 2021
CVE-2021-20426 IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for… 5.9 Moyenne 24 mai 2021
CVE-2021-20419 IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… 6.8 Moyenne 24 mai 2021
CVE-2021-20389 IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user 5.1 Moyenne 24 mai 2021
CVE-2021-20386 IBM Security Guardium 11.2 is vulnerable to cross-site scripting 6.1 Moyenne 24 mai 2021
CVE-2021-20385 IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system 8.4 Élevée 24 mai 2021
CVE-2020-4990 IBM Security Guardium 11.2 is vulnerable to SQL injection 7.6 Élevée 24 mai 2021
CVE-2020-4184 IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required,… 5.8 Moyenne 15 mars 2021

Autres produits IBM