CVE-2022-43909 IBM Security Guardium cross-site scripting

IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 240905...

CVE-2022-43909

CVE-2022-43909 affects IBM Security Guardium 11.4, where a cross-site scripting (XSS) flaw in the Web UI could allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Public details in the connected documents confirm affected produ...

CVE-2022-43909 IBM Security Guardium cross-site scripting

IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 240905...

CVE-2022-43907

IBM Security Guardium 11.4 includes a command-execution vulnerability that allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Affected version: Guardium 11.4. Root cause per disclosures: insufficient input filtering of crafte...

CVE-2022-43907 IBM Security Guardium command execution

IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901...

CVE-2022-43907 IBM Security Guardium command execution

IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901...

CVE-2023-30437 IBM Security Guardium information disclosure

IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force ID: 252293...

CVE-2023-30437 IBM Security Guardium information disclosure

IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force ID: 252293...

CVE-2023-30437

CVE-2023-30437 affects IBM Security Guardium 11.3, 11.4, and 11.5. Affected component: the web UI/API surface used to enumerate usernames via a specially crafted HTTP request, enabling information disclosure by an unauthenticated/unauthorized user. Root cause details are described across multiple...

CVE-2023-30436 IBM Security Guardium cross-site scripting

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 25229...

CVE-2023-30436

CVE-2023-30436 affects IBM Security Guardium versions 11.3, 11.4, and 11.5. The connected documents describe a cross-site scripting vulnerability in the Web UI that could allow embedding arbitrary JavaScript and potentially lead to credentials disclosure within a trusted session. Root cause is no...

CVE-2023-30436 IBM Security Guardium cross-site scripting

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 25229...

CVE-2023-30435 IBM Security Guardium cross-site scripting

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

CVE-2023-30435

Summary (CVE-2023-30435) : IBM Security Guardium versions 11.3–11.5 are vulnerable to stored cross-site scripting due to inadequate input filtering/escaping in the Web UI. An attacker could embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affecte...

CVE-2023-30435 IBM Security Guardium cross-site scripting

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

IBM Security Guardium 跨站脚本漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security...

PT-2023-14391

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.4 Description The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Recommendations For IBM Security Guardium version 11.4, conside...

PT-2023-6904 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.4 Description: The issue is related to SQL injection, where a remote attacker could send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. This is due to th...

PT-2023-14389 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 11.3 through 11.4 Description: The issue could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. Recommendations: For versions 11.3 and 11.4, conside...

PT-2023-22690

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 11.3 through 11.5 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted...