CVE-2012-3336

The CVE-2012-3336 entry concerns IBM InfoSphere Guardium 8.0, 8.01, and 8.2. The vulnerability is a SQL injection in multiple Guardium scripts. A remote authenticated attacker could send specially-crafted SQL statements to these scripts, allowing view, addition, modification, or deletion of data ...

CVE-2012-3337: Improper Limitation of a Pathname to a Restricted Directory

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on the system. IBM X-Force ID: 78284...

PT-2020-7214

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on...

PT-2020-7215

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue allows a remote attacker to bypass security restrictions due to improper restrictions on the create new user account functionality. This could be exploited to create...

PT-2020-7217

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 7.0 through 8.2 Description The issue is caused by improper validation of user-supplied input, leading to cross-site scripting. A remote attacker could exploit this using a specially-crafted URL to execute scri...

CVE-2012-3336: Improper Neutralization of Special Elements used in an SQL Command

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282...

PT-2020-7213

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue allows a remote authenticated attacker to send specially-crafted SQL statements to multiple scripts. This could enable the attacker to view, add, modify, or delete...

CVE-2012-3340: Improper Restriction of Recursive Entity References in DTDs

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291...

CVE-2012-3341: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of...

CVE-2012-3338: Improper Input Validation

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286...

PT-2020-7216

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue is caused by improper validation of user-supplied input, leading to XML external entity injection. A remote authenticated attacker could exploit this to obtain sensitive...

IBM Security Guardium Insights Improper Privilege Vulnerability

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An Improper Privilege vulnerability exists in IBM Security Guardium Insights 2.0.1, which stems from the product performing...

IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2020-49936)

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. IBM Security Guardium Insights 2.0.1 suffers from an information disclosure vulnerability that can be exploited by an attacker t...

IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2020-49935)

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. IBM Security Guardium Insights 2.0.1 suffers from an information disclosure vulnerability that can be exploited by an attacker t...

IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2020-49353)

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.1. The vulnerability stems from the product...

IBM Security Guardium Insights Information Disclosure Vulnerability

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.1. The vulnerability stems from a failure t...

IBM Security Guardium Insights Authorization Issues Vulnerability

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. IBM Security Guardium Insights 2.0.1 suffers from an authorization issue vulnerability that can be exploited by an attacker to...

IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2020-49352)

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.1. The vulnerability can be exploited by a...

IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2020-49351)

IBM Security Guardium Insights is a suite of data security solutions from IBM USA. The product supports data analytics, threat alerts, data security auditing and local data monitoring. A security vulnerability exists in IBM Security Guardium Insights 2.0.1, which stems from the disclosure of...

CVE-2020-4603

IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 184880...