Skip to content
OpenAdvisories

Product · IBM

Security Guardium

106 known vulnerabilities.

106 results · Feed

  • Medium 4.7

    IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier f…

  • Medium 5.3

    IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical erro…

  • High 7.2

    IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by s…

  • Medium 5.9

    IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for …

  • Medium 5.1

    IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force I…

  • Medium 6.8

    IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h…

  • Medium 6.1

    IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

  • High 7.6

    IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statement…

  • High 8.4

    IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By …

  • Medium 5.8

    IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, w…

  • High 8.8

    IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-…

  • Medium 4.3

    IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attack…

  • High 7.6

    IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL …

  • Medium 5.9

    IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unpr…

  • Medium 6.8

    IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary command…

  • Medium 5.4

    IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

  • Medium 5.4

    IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

  • Medium 4.9

    IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would …

  • Medium 4.8

    IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

  • Medium 5.3

    IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to miss…

  • Medium 5.9

    IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attac…

  • Medium 5.3

    IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in fur…

  • Medium 5.3

    IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends …

  • Medium 4.4

    IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force…

  • Medium 4.1

    IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h…

  • Medium 6.1

    IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

  • Medium 6.5

    IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a…

  • Medium 5.3

    IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks aga…

  • Medium 4.1

    IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, wh…

  • Medium 6.8

    IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for …

  • High 8.8

    IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By …

  • Medium 6.1

    IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

  • High 8.8

    IBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could allow an authenticated us…

  • High 8.8

    IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to e…

  • Medium 5.4

    IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…

  • Medium 5.4

    IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…

  • Low 3.7

    IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates,…

  • Medium 5.9

    IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require t…

  • Low 3.7

    IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclo…

  • Medium 6.1

    IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…