Security Guardium Data Encryption (Ibm) - vulnerabilities (CVEs)

20 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2022-03-10. Vendor: Ibm.

CVEs of Security Guardium Data Encryption

CVE-2021-39022 - CVSS 8.8 (high), 2022-03-10: IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or…
CVE-2021-39025 - CVSS 5.3 (medium), 2022-03-10: IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863.
CVE-2021-39026 - CVSS 5.9 (medium), 2022-02-18: IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable…
CVE-2021-39021 - CVSS 5.3 (medium), 2022-02-02: IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an…
CVE-2019-4702 - CVSS 8.1 (high), 2021-01-13: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or…
CVE-2019-4687 - CVSS 5.3 (medium), 2021-01-13: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized…
CVE-2019-4160 - CVSS 7.5 (high), 2021-01-13: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2019-4695 - CVSS 4 (medium), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID:…
CVE-2019-4699 - CVSS 2.7 (low), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated…
CVE-2019-4693 - CVSS 6 (medium), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force…
CVE-2019-4698 - CVSS 7.5 (high), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers…
CVE-2019-4713 - CVSS 8.8 (high), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a…
CVE-2019-4692 - CVSS 5.3 (medium), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further…
CVE-2019-4697 - CVSS 6.5 (medium), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID:…
CVE-2019-4701 - CVSS 5.3 (medium), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936.
CVE-2019-4691 - CVSS 5.4 (medium), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
CVE-2019-4694 - CVSS 9.8 (critical), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…
CVE-2019-4689 - CVSS 7.5 (high), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable…
CVE-2019-4688 - CVSS 4.3 (medium), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get…
CVE-2019-4686 - CVSS 5.3 (medium), 2020-08-26: IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get…