Security Guardium Big Data Intelligence (Ibm) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2020-10-16. Vendor: Ibm.

CVEs of Security Guardium Big Data Intelligence

CVE-2020-4254 - CVSS 7.5 (high), 2020-10-16: IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2019-4309 - CVSS 5.9 (medium), 2019-10-29: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses hard coded credentials which could allow a local user to obtain highly sensitive information.…
CVE-2019-4329 - CVSS 4.3 (medium), 2019-10-29: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application…
CVE-2019-4307 - CVSS 5.5 (medium), 2019-10-29: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID:…
CVE-2019-4314 - CVSS 7.5 (high), 2019-10-29: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource that might be accessible to another…
CVE-2019-4339 - CVSS 7.5 (high), 2019-10-29: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2019-4311 - CVSS 5.3 (medium), 2019-10-29: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to unauthorized users. The information can be used to mount further…
CVE-2019-4330 - CVSS 4.3 (medium), 2019-10-29: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to…
CVE-2019-4306 - CVSS 6.5 (medium), 2019-10-29: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive…
CVE-2019-4340 - CVSS 8.2 (high), 2019-08-20: IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote…
CVE-2019-4338 - CVSS 7.5 (high), 2019-08-20: IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an…
CVE-2019-4310 - CVSS 7.5 (high), 2019-08-20: IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to brute force account…
CVE-2017-1768 - CVSS 4.3 (medium), 2018-05-29: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information about its environment, users, or…
CVE-2018-1375 - CVSS 7.5 (high), 2018-05-29: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentication which could lead to session…
CVE-2018-1370 - CVSS 5.4 (medium), 2018-05-29: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read…
CVE-2018-1369 - CVSS 3.7 (low), 2018-05-29: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if…
CVE-2018-1376 - CVSS 6.1 (medium), 2018-05-29: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
CVE-2018-1373 - CVSS 9.8 (critical), 2018-03-02: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account…
CVE-2018-1372 - CVSS 9.8 (critical), 2018-02-27: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong passwords by default, which makes it easier for…
CVE-2018-1425 - CVSS 5.9 (medium), 2018-02-27: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2018-1377 - CVSS 7.8 (high), 2018-02-26: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID:…
CVE-2017-1774 - CVSS 5.3 (medium), 2018-02-26: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further…