IBM InfoSphere Guardium SQL Injection Vulnerability

InfoSphere Guardium is an enterprise information database auditing and protection solution. A SQL injection vulnerability exists in several InfoSphere Guardium scripts that can be exploited by remote attackers to submit a specially crafted SQL request to manipulate a database, which could result ...

IBM InfoSphere Guardium Directory Traversal Vulnerability

InfoSphere Guardium is an enterprise information database auditing and protection solution. A directory traversal vulnerability exists in IBM InfoSphere Guardium 8.0, 8.01, and 8.2, which allows an attacker to send a malicious URL request to download arbitrary files on the system...

CVE-2012-3340

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291...

CVE-2012-3338

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286...

CVE-2012-3341

IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of...

Security feature bypass

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286...

Xxe

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291...

Cross site scripting

IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of...

CVE-2012-3337

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on the system. IBM X-Force ID: 78284...

CVE-2012-3336

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282...

Design/Logic Flaw

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on the system. IBM X-Force ID: 78284...

Sql injection

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282...

CVE-2012-3341

IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of...

CVE-2012-3341

Vulnerability summary (CVE-2012-3341) : IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is affected by cross-site scripting due to improper validation of user-supplied input. A remote attacker could lure a victim to click a specially-crafted URL, causing script execution in the browser within the...

CVE-2012-3340

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291...

CVE-2012-3340

IBM InfoSphere Guardium (versions 8.0, 8.01, 8.2) is affected by an XML External Entity (XXE) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker could disclose sensitive information (e.g., contents of server files such as database passwords). Root ...

CVE-2012-3338

Summary of CVE-2012-3338 : IBM InfoSphere Guardium (versions 8.0, 8.01, 8.2) contains an improper restriction on the create new user account functionality that could allow a remote attacker to bypass security restrictions and create unprivileged user accounts. IBM's IBM X-Force entry and the offi...

CVE-2012-3338

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286...

CVE-2012-3337

CVE-2012-3337 affects IBM InfoSphere Guardium 8.0, 8.01, and 8.2. A directory traversal flaw lets remote attackers send specially crafted URLs (../ sequences) to download arbitrary files. IBM’s advisory labels it a remote file disclosure vulnerability in Guardium. Remediation per the vendor invol...

CVE-2012-3337

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on the system. IBM X-Force ID: 78284...