Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
security guardium vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2021-39077
IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587.
Ibm Security Guardium
Ibm Security Guardium 10.5
Ibm Security Guardium 10.6
4.3
CVSSv2
CVE-2021-39074
IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Security Guardium 11.4
4.3
CVSSv2
CVE-2021-39072
IBM Security Guardium 11.3 could allow a remote malicious user to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
Ibm Security Guardium 11.3
5
CVSSv2
CVE-2021-39076
IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt sensitive information. IBM X-Force ID: 215585.
Ibm Security Guardium 10.5
Ibm Security Guardium 11.3
2.1
CVSSv2
CVE-2021-39078
IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589.
Ibm Security Guardium 10.5
4.3
CVSSv2
CVE-2021-39026
IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote malicious user to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using ...
Ibm Guardium Data Encryption 5.0.0.2
Ibm Guardium Data Encryption 5.0.0.3
4.3
CVSSv2
CVE-2021-29838
IBM Security Guardium Insights 3.0 could allow a remote malicious user to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle te...
Ibm Security Guardium Insights 3.0.0
6.5
CVSSv2
CVE-2021-29845
IBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized actions due to improper input validation. IBM X-Force ID: 205255.
Ibm Security Guardium Insights 3.0.0
4
CVSSv2
CVE-2021-29846
IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 205256.
Ibm Security Guardium Insights 3.0.0
5
CVSSv2
CVE-2021-38980
IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote malicious user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in furthe...
Ibm Security Guardium Key Lifecycle Manager
Ibm Security Guardium Key Lifecycle Manager 4.1.1
Ibm Security Key Lifecycle Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »