4.3
CVE-2026-1272
- EPSS 0.03%
- Veröffentlicht 22.04.2026 23:33:45
- Zuletzt bearbeitet 27.04.2026 18:23:48
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
IBM Guardium Data Protection is affected by multiple vulnerabilities
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnerability in the user access control panel.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Guardium Data Protection Version12.0
Ibm ≫ Guardium Data Protection Version12.1
Ibm ≫ Guardium Data Protection Version12.2
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.085 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
| psirt@us.ibm.com | 2.7 | 1.2 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
|
CWE-613 Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."