Description
IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Security Guardium | 11.5 | — |
Advisories 2
- VA-25-136-01 IBM Security Guardium stored cross-site scripting CISA ICS & IT advisories · Jun 16, 2025
- WID-SEC-2025-1078 IBM Security Guardium: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · May 15, 2025
References
- https://www.ibm.com/support/pages/node/7233600 vendor-advisory patch