59 results · Clear filters · Feed
-
Medium 6.7
IBM Security Guardium privilege escalation
IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program.
-
Medium 4.9
IBM Security Guardium information disclosure
IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.
-
Medium 4.3
IBM Security Guardium information disclosure
IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.
-
Medium 4.3
IBM Security Guardium information disclosure
IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
-
Medium 5.5
IBM Security Guardium cross-site scripting
IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
-
Medium 4.9
IBM Security Guardium information disclosure
IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect privilege assignment.
-
Medium 6.5
IBM Security Guardium server-side request forgery
IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
-
Medium 5.4
IBM Security Guardium cross-site scripting
IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a …
-
Medium 4.4
IBM Security Guardium denial of service
IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690.
-
Medium 4.3
IBM Security Guardium denial of service
IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to improper input validation. IBM X-Force ID: 240894.
-
Medium 4.6
IBM Security Guardium cross-site scripting
IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
-
Medium 5.3
IBM Security Guardium information disclosure
IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force ID: 252293.
-
Medium 5.5
IBM Security Guardium cross-site scripting
IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a …
-
Medium 4.3
IBM Security Guardium denial of service
IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validation. IBM X-Force ID: 240903.
-
Medium 4.4
IBM Security Guardium privilege escalation
IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753.
-
Medium 6.3
IBM Security Guardium session fixation
IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657.
-
Medium 4.4
IBM Security Guardium information disclosure
IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IBM X-Force ID: 235405.
-
Medium 4.4
IBM Security Guardium information disclosure
IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587.
-
Medium 6.1
IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…
-
Medium 4.1
IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IB…
-
Medium 5.9
IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to prop…
-
Medium 4.8
IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting. This vulnerability …
-
Medium 5.4
IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modi…
-
Medium 6.5
IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in fu…
-
Medium 5.3
IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force…
-
Medium 4.3
IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in f…
-
Medium 4.7
IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier f…
-
Medium 5.3
IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical erro…
-
Medium 5.9
IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for …
-
Medium 5.1
IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force I…
-
Medium 6.8
IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h…
-
Medium 6.1
IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…
-
Medium 5.8
IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, w…
-
Medium 4.3
IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attack…
-
Medium 5.9
IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unpr…
-
Medium 6.8
IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary command…
-
Medium 5.4
IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…
-
Medium 5.4
IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…
-
Medium 4.9
IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would …
-
Medium 4.8
IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…