CVE-2018-1889

IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152080...

CVE-2017-1272

IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747...

CVE-2018-1889

IBM Security Guardium 10.0–10.5 are affected by a cross-site scripting vulnerability in the Web UI that lets an attacker inject arbitrary JavaScript, potentially exposing credentials within a trusted session. Root cause: XSS in the user interface. Affected versions: Guardium 10.0–10.5. CVSSv3 bas...

CVE-2017-1597

IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132610...

CVE-2017-1265

IBM Security Guardium versions 10.0–10.5 contain an improper certificate validation flaw that can enable MITM-style spoofing of trusted entities. The issue affects the Guardium service components that handle certificate validation, enabling an attacker to present forged certificates under network...

CVE-2018-1891

IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152082...

CVE-2017-1597

CVE-2017-1597 affects IBM Security Guardium Database Activity Monitor versions 10.0–10.5. The root cause is a default weak password policy (no requirement for strong passwords), which can enable account compromise. Official advisories estimate CVSSv3 base score 7.5 (High) with impact on confident...

CVE-2017-1265

IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM techniques. IBM X-Force ID: 124740...

CVE-2018-1891

Summary: CVE-2018-1891 affects IBM Security Guardium 10.0–10.5. The issue is a cross-site scripting (XSS) vulnerability in the Web UI that could let an attacker inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The NVD entry lists CVSSv3 base sco...

CVE-2017-1272

CVE-2017-1272 affects IBM Security Guardium 10.0–10.5, where sensitive information is stored in URL parameters. This can disclose data if unauthorized parties access URLs through server logs, the referrer header, or browser history. The core issue is parameter handling in Guardium URLs; no exploi...

IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2018-26034)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security Guardium...

IBM Security Guardium Information Disclosure Vulnerability (CNVD-2018-26895)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium that stems fr...

IBM Security Guardium Database Activity Monitor Weak Password Policy Vulnerability

IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. The product provides features such as automated controls for compliance and protection against internal and external threats. A weak password policy vulnerability exists in IBM Security Guardium...

IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2018-26033)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security Guardium...

IBM Security Guardium Information Disclosure Vulnerability (CNVD-2018-26032)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An information disclosure vulnerability exists in IBM Security Guardiu...

IBM Security Guardium Hardcoded Credentials Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A hard-coded credentials vulnerability exists in IBM Security Guardium...

IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2018-25401)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security Guardium...

Security Bulletin: IBM Security Guardium is affected by an Improper Certificate Validation vulnerability

Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1509 DESCRIPTION: IBM Security Guardium EcoSystem does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a...

Security Bulletin: IBM Security Guardium is affected by a Improper Certificate Validation vulnerability

Summary IBM Security Guardium has addressed the following vulnerability Vulnerability Details CVEID: CVE-2017-1265 DESCRIPTION: IBM Security Guardium does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a...

Security Bulletin: Vulnerabilities in Struts v2 affect IBM Security Guardium (CVE-2016-1181, CVE-2016-1182)

Summary Struts v2 vulnerabilities affect IBM Security Guardium. IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2016-1181 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to...