Skip to content
OpenAdvisories
Low VA-25-136-01 1 CVE

IBM Security Guardium stored cross-site scripting

Published May 16, 2025 · Updated Jun 16, 2025 · Revision 2

Vendor: IBM Product: Security Guardium

Summary

IBM Security Guardium 11.5 before patch 11.0p565 is vulnerable to stored cross-site scripting (XSS). An attacker with administrative privileges could store arbitrary content or script in the administrative web interface that would be rendered or executed by users visiting modified parts of the web interface. The attacker may be able or obtain session tokens which could be used to log in as a different user.

Vulnerabilities 1

  • Medium 5.5
    CVE-2025-3440

    IBM Security Guardium cross-site scripting

    IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…

    IBM Security Guardium

Revision history

  1. #1.1.0

    Add acknowledgment

  2. #1.0.0

    Initial publication