Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

security guardium vulnerabilities and exploits

(subscribe to this query)
6.9
CVSSv2
CVE-2017-1122
IBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a local attacker with CLI access to inject arbitrary commands which would be executed as root. IBM X-Force ID: 121174.
Ibm Security Guardium 9.5Ibm Security Guardium 10.0Ibm Security Guardium 10.0.1Ibm Security Guardium 10.1Ibm Security Guardium 9.0Ibm Security Guardium 9.1Ibm Security Guardium 8.2Ibm Security Guardium 10.1.2
7.2
CVSSv2
CVE-2016-6065
IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.
Ibm Security Guardium 10.1.2Ibm Security Guardium 10.0Ibm Security Guardium 10.0.1Ibm Security Guardium 10.1Ibm Security Guardium 9.1Ibm Security Guardium 8.2Ibm Security Guardium 9.0Ibm Security Guardium 9.5
7.5
CVSSv2
CVE-2016-0249
SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x up to and including 9.5 before p700, and 10.x up to and including 10.1 before p100 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Ibm Security Guardium 10.1.0Ibm Security Guardium 10.0.1Ibm Security Guardium 9.0Ibm Security Guardium 9.1Ibm Security Guardium 9.5Ibm Security Guardium 10.0Ibm Security Guardium
2.1
CVSSv2
CVE-2016-0247
IBM Security Guardium 8.2 before p310, 9.x up to and including 9.5 before p700, and 10.x up to and including 10.1 before p100 allows local users to obtain sensitive cleartext information via unspecified vectors, as demonstrated by password information.
Ibm Security Guardium 9.1Ibm Security Guardium 9.5Ibm Security Guardium 10.1Ibm Security Guardium 10.01Ibm Security Guardium 10.0Ibm Security Guardium 8.2Ibm Security Guardium 9.0
5
CVSSv2
CVE-2017-1267
IBM Security Guardium 10.0 and 10.1 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 124742.
Ibm Security Guardium 9.1Ibm Security Guardium 10.1.2Ibm Security Guardium 9.5Ibm Security Guardium 10.0Ibm Security Guardium 10.0.1Ibm Security Guardium 10.1Ibm Security Guardium 9.0
4.3
CVSSv2
CVE-2016-0246
Cross-site scripting (XSS) vulnerability in IBM Security Guardium 8.2 before p310, 9.x up to and including 9.5 before p700, and 10.x up to and including 10.1 before p100 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL.
Ibm Security Guardium 9.1Ibm Security Guardium 9.0Ibm Security Guardium 10.1Ibm Security Guardium 10.01Ibm Security Guardium 8.2Ibm Security Guardium 10.0Ibm Security Guardium 9.5
4.3
CVSSv2
CVE-2016-0238
IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an malicious user to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409
Ibm Security Guardium 10.1.2Ibm Security Guardium 9.1Ibm Security Guardium 10.0Ibm Security Guardium 9.0Ibm Security Guardium 10.1Ibm Security Guardium 9.5
5
CVSSv2
CVE-2017-1255
IBM Security Guardium 10.0, 10.0.1, and 10.1 up to and including 10.1.4 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 124675.
Ibm Security Guardium 10.1Ibm Security Guardium 10.1.3Ibm Security Guardium 10.1.4Ibm Security Guardium 10.0Ibm Security Guardium 10.0.1Ibm Security Guardium 10.1.2
5.5
CVSSv2
CVE-2017-1266
IBM Security Guardium 10.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 124741.
Ibm Security Guardium 10.0Ibm Security Guardium 10.1.0Ibm Security Guardium 10.1.3Ibm Security Guardium 10.0.1Ibm Security Guardium 10.1.2
2.1
CVSSv2
CVE-2017-1270
IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 124745.
Ibm Security Guardium 10.0.1Ibm Security Guardium 10.1.0Ibm Security Guardium 10.1.2Ibm Security Guardium 10.1.3Ibm Security Guardium 10.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook