CVE-2017-1256

IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124678...

CVE-2016-0238

IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 110409...

CVE-2017-1269

IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 124744...

CVE-2017-1269

The CVE-2017-1269 issue affects IBM Security Guardium v10.0, 10.0.1, 10.1, 10.1.2, and 10.1.3. It is a SQL injection vulnerability that could allow a remote attacker to view, add, modify, or delete data in the back-end database by sending specially crafted SQL statements. The root cause is SQL in...

CVE-2016-0238

CVE-2016-0238 affects IBM Security Guardium 9.0/9.1/9.5 and 10.0/10.1 (including 10.1.2). Root cause: cleartext transmission of sensitive data in the query of the request, enabling potential MITM access to sensitive information. Impact: confidentiality impact (low per CVSS 3.0) with no integrity ...

CVE-2017-1256

CVE-2017-1256 affects IBM Security Guardium, where a cross-site scripting flaw in the Web UI could allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected versions: Guardium 10.0, 10.0.1, 10.1, 10.1.2. Root cause: XSS in t...

CVE-2017-1256

IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124678...

CVE-2017-1258

IBM Security Guardium has a missing authentication check for a critical resource, allowing anonymous access. Affected versions include Guardium 9.0, 9.1 and 9.5, and 10.0, 10.0.1, 10.1, 10.1.2. CVSSv3 base score 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Remediation/fixes are provided via IBM Fix...

CVE-2017-1258

IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685...

IBM Security Guardium Operating System Command Injection Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. An operating system command injection vulnerability exists i...

IBM Security Guardium Information Disclosure Vulnerability (CNVD-2017-15926)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. An information disclosure vulnerability exists in IBM Securi...

IBM Security Guardium SQL Injection Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. An SQL injection vulnerability exists in IBM Security...

IBM Security Guardium XML External Entity Injection Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. An XML external entity injection vulnerability exists in IBM...

IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2017-15930)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. A cross-site scripting vulnerability exists in IBM Security...

IBM Security Guardium Security Bypass Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. A security bypass vulnerability exists in IBM Security...

Unspecified Vulnerability in IBM Security Guardium

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. A security vulnerability exists in IBM Security Guardium...

CVE-2017-1122

IBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a local attacker with CLI access to inject arbitrary commands which would be executed as root. IBM X-Force ID: 121174...

CVE-2017-1122

IBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a local attacker with CLI access to inject arbitrary commands which would be executed as root. IBM X-Force ID: 121174...

Memory corruption

IBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a local attacker with CLI access to inject arbitrary commands which would be executed as root. IBM X-Force ID: 121174...

CVE-2017-1122

CVE-2017-1122 affects IBM Security Guardium versions 8.2, 9.0, and 10.0. A local attacker with CLI access can inject arbitrary commands that would run with root privileges. IBM’s bulletin lists remediation fixes for Guardium 8.2 (EOS 2016) and fixes for Guardium 9.x and 10.x (via FixCentral optio...