Ibm

Security Guardium

114 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-36020

  • EPSS 0.02%
  • Published 06.08.2025 14:28:45
  • Last modified 13.08.2025 18:21:56

IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.

6.7

CVE-2025-3473

  • EPSS 0.01%
  • Published 11.06.2025 14:24:46
  • Last modified 13.08.2025 14:26:30

IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program.

6.5

CVE-2025-25029

Media report
  • EPSS 0.05%
  • Published 28.05.2025 01:12:19
  • Last modified 04.06.2025 14:34:42

IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.

4.3

CVE-2025-25026

  • EPSS 0.05%
  • Published 28.05.2025 01:11:23
  • Last modified 04.06.2025 14:34:34

IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.

5.3

CVE-2025-25025

Media report
  • EPSS 0.06%
  • Published 28.05.2025 01:10:05
  • Last modified 04.06.2025 14:34:21

IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

5.5

CVE-2025-3440

  • EPSS 0.05%
  • Published 15.05.2025 15:40:34
  • Last modified 16.05.2025 14:43:26

IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosu...

4.9

CVE-2025-25023

  • EPSS 0.03%
  • Published 09.04.2025 14:15:28
  • Last modified 20.06.2025 16:59:29

IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect privilege assignment.

5.4

CVE-2024-49336

  • EPSS 0.07%
  • Published 19.12.2024 18:15:22
  • Last modified 25.02.2025 12:15:30

IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

5.4

CVE-2023-47710

  • EPSS 0.08%
  • Published 24.05.2024 12:15:08
  • Last modified 08.01.2025 20:17:26

IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure ...

4.4

CVE-2023-47717

  • EPSS 0.04%
  • Published 16.05.2024 18:15:08
  • Last modified 13.06.2025 19:04:54

IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690.