Security Guardium (Ibm) - vulnerabilities (CVEs)

114 CVEs, 0 in the last 30 days, 43 known versions, newest CVE from 2025-08-06. Vendor: Ibm.

CVEs of Security Guardium

CVE-2025-36020 - CVSS 7.5 (high), 2025-08-06: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.
CVE-2025-3473 - CVSS 6.7 (medium), 2025-06-11: IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the…
CVE-2025-25026 - CVSS 4.3 (medium), 2025-05-28: IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.
CVE-2025-25025 - CVSS 5.3 (medium), 2025-05-28: IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.…
CVE-2025-25029 - CVSS 6.5 (medium), 2025-05-28: IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.
CVE-2025-3440 - CVSS 5.5 (medium), 2025-05-15: IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the…
CVE-2025-25023 - CVSS 4.9 (medium), 2025-04-09: IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect privilege assignment.
CVE-2024-49336 - CVSS 6.5 (medium), 2024-12-19: IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized…
CVE-2023-47710 - CVSS 5.4 (medium), 2024-05-24: IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2023-47717 - CVSS 4.4 (medium), 2024-05-16: IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690.
CVE-2023-47712 - CVSS 7.8 (high), 2024-05-14: IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a local user to gain elevated privileges on the system due to improper permissions control. IBM…
CVE-2023-47711 - CVSS 6.5 (medium), 2024-05-14: IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow an authenticated user to upload files that would cause a denial of service. IBM X-Force ID: 271526.
CVE-2023-47709 - CVSS 9.1 (critical), 2024-05-14: IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a…
CVE-2023-42004 - CVSS 8.8 (high), 2023-11-28: IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper…
CVE-2022-43906 - CVSS 5.3 (medium), 2023-10-04: IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 240897.
CVE-2022-43903 - CVSS 6.5 (medium), 2023-09-05: IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to improper input validation. IBM X-Force…
CVE-2022-43904 - CVSS 7.5 (high), 2023-08-28: IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM…
CVE-2023-33852 - CVSS 7.6 (high), 2023-08-27: IBM Security Guardium 11.4 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to…
CVE-2023-30437 - CVSS 5.3 (medium), 2023-08-27: IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force…
CVE-2022-43909 - CVSS 5.4 (medium), 2023-08-27: IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2023-30436 - CVSS 5.5 (medium), 2023-08-27: IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2023-30435 - CVSS 8.9 (high), 2023-08-27: IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
CVE-2022-43907 - CVSS 8.8 (high), 2023-08-27: IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM…
CVE-2023-35893 - CVSS 9.9 (critical), 2023-08-16: IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a…
CVE-2022-43910 - CVSS 8.4 (high), 2023-07-19: IBM Security Guardium 11.3 could allow a local user to escalate their privileges due to improper permission controls. IBM X-Force ID: 240908.
CVE-2022-43908 - CVSS 6.5 (medium), 2023-07-19: IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validation. IBM X-Force ID: 240903.
CVE-2022-22307 - CVSS 7.8 (high), 2023-06-15: IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753.
CVE-2023-0041 - CVSS 8.8 (high), 2023-06-05: IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657.
CVE-2022-39166 - CVSS 4.9 (medium), 2022-12-20: IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IBM X-Force ID: 235405.
CVE-2021-39077 - CVSS 4.4 (medium), 2022-11-03: IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user.…
CVE-2021-39074 - CVSS 6.1 (medium), 2022-06-29: IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2021-39072 - CVSS 5.9 (medium), 2022-04-19: IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport…
CVE-2021-39078 - CVSS 4.4 (medium), 2022-04-19: IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589.
CVE-2021-39076 - CVSS 7.5 (high), 2022-04-19: IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM…
CVE-2021-29735 - CVSS 5.4 (medium), 2021-11-08: IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2021-20377 - CVSS 2.7 (low), 2021-09-23: IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.…
CVE-2020-4690 - CVSS 9.8 (critical), 2021-09-23: IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…
CVE-2021-29773 - CVSS 5.4 (medium), 2021-09-15: IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure…
CVE-2021-20433 - CVSS 6.5 (medium), 2021-09-15: IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM…
CVE-2021-20420 - CVSS 4.3 (medium), 2021-08-11: IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in further attacks against the system. IBM…
CVE-2021-20418 - CVSS 9.8 (critical), 2021-08-11: IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user…
CVE-2021-20427 - CVSS 7.5 (high), 2021-08-11: IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID:…
CVE-2020-4990 - CVSS 8.8 (high), 2021-05-24: IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to…
CVE-2021-20389 - CVSS 7.8 (high), 2021-05-24: IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 195770.
CVE-2021-20428 - CVSS 5.3 (medium), 2021-05-24: IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.…
CVE-2021-20386 - CVSS 6.1 (medium), 2021-05-24: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2021-20426 - CVSS 9.8 (critical), 2021-05-24: IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…
CVE-2021-20385 - CVSS 8.4 (high), 2021-05-24: IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an…
CVE-2021-20419 - CVSS 7.5 (high), 2021-05-24: IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…
CVE-2021-20557 - CVSS 7.2 (high), 2021-05-24: IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM…
CVE-2020-4184 - CVSS 7.3 (high), 2021-03-15: IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or…
CVE-2020-4952 - CVSS 8.8 (high), 2021-01-27: IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028.
CVE-2020-4189 - CVSS 4.3 (medium), 2021-01-27: IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID:…
CVE-2020-4921 - CVSS 8.8 (high), 2021-01-20: IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the…
CVE-2020-4688 - CVSS 7.8 (high), 2021-01-20: IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused by command…
CVE-2020-4689 - CVSS 6.8 (medium), 2020-10-12: IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper…
CVE-2020-4678 - CVSS 4.9 (medium), 2020-10-12: IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would not have access to. IBM X-Force ID:…
CVE-2020-4681 - CVSS 5.4 (medium), 2020-10-12: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4680 - CVSS 5.4 (medium), 2020-10-12: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4679 - CVSS 4.8 (medium), 2020-10-12: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2018-1501 - CVSS 7.5 (high), 2020-08-26: IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missing security controls. IBM X-Force ID:…
CVE-2020-4185 - CVSS 7.5 (high), 2020-07-30: IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
CVE-2020-4186 - CVSS 5.3 (medium), 2020-07-30: IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM…
CVE-2020-4188 - CVSS 5.3 (medium), 2020-06-23: IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbers. IBM X-Force…
CVE-2020-4191 - CVSS 4.4 (medium), 2020-06-04: IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…
CVE-2020-4183 - CVSS 6.1 (medium), 2020-06-04: IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4193 - CVSS 9.8 (critical), 2020-06-04: IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID:…
CVE-2020-4177 - CVSS 9.8 (critical), 2020-06-03: IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…
CVE-2020-4187 - CVSS 5.3 (medium), 2020-06-03: IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174805.
CVE-2020-4182 - CVSS 6.1 (medium), 2020-06-03: IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2020-4307 - CVSS 6.5 (medium), 2020-06-03: IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force…
CVE-2020-4180 - CVSS 8.8 (high), 2020-06-03: IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an…
CVE-2020-4190 - CVSS 6.7 (medium), 2020-06-03: IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound…
CVE-2019-4422 - CVSS 8.8 (high), 2019-10-03: IBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could allow an authenticated user to change the accessmgr password.…
CVE-2019-4292 - CVSS 8.8 (high), 2019-07-02: IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable…
CVE-2017-1272 - CVSS 5.3 (medium), 2018-12-17: IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have…
CVE-2018-1891 - CVSS 5.4 (medium), 2018-12-17: IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2017-1265 - CVSS 5.9 (medium), 2018-12-17: IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This weakness might…
CVE-2018-1889 - CVSS 5.4 (medium), 2018-12-17: IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2017-1597 - CVSS 7.5 (high), 2018-12-17: IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords…
CVE-2018-1817 - CVSS 6.1 (medium), 2018-12-13: IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2018-1818 - CVSS 9.8 (critical), 2018-12-13: IBM Security Guardium 10 and 10.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…
CVE-2017-1268 - CVSS 7.5 (high), 2018-12-13: IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does…
CVE-2018-1509 - CVSS 7.4 (high), 2018-10-02: IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted…
CVE-2018-1498 - CVSS 7.8 (high), 2018-10-02: IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223.
CVE-2017-1255 - CVSS 7.5 (high), 2018-05-02: IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2018-1368 - CVSS 4.4 (medium), 2018-02-09: IBM Security Guardium Database Activity Monitor 9.0, 9.1, and 9.5 could allow a local user with low privileges to view report pages and perform some actions…
CVE-2017-1600 - CVSS 5.4 (medium), 2017-12-20: IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
CVE-2017-1598 - CVSS 7.5 (high), 2017-12-20: IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2017-1596 - CVSS 5.5 (medium), 2017-12-20: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force…
CVE-2017-1757 - CVSS 8.8 (high), 2017-12-20: IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to…
CVE-2017-1262 - CVSS 6.1 (medium), 2017-12-20: IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to…
CVE-2017-1595 - CVSS 5.5 (medium), 2017-12-20: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force…
CVE-2017-1261 - CVSS 3.3 (low), 2017-12-20: IBM Security Guardium 10.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 124736.
CVE-2017-1270 - CVSS 3.3 (low), 2017-12-20: IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability.…
CVE-2017-1257 - CVSS 4.3 (medium), 2017-12-20: IBM Security Guardium 10.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM…
CVE-2017-1266 - CVSS 5.4 (medium), 2017-12-20: IBM Security Guardium 10.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended…
CVE-2017-1271 - CVSS 7.5 (high), 2017-12-07: IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a…
CVE-2017-1267 - CVSS 7.5 (high), 2017-07-21: IBM Security Guardium 10.0 and 10.1 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code.…
CVE-2017-1253 - CVSS 9.9 (critical), 2017-07-05: IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an…