Lucene search
+L

3483 matches found

OSV
OSV
•added 2019/08/20 8:15 p.m.•10 views

CVE-2019-4340

IBM Security Guardium Big Data Intelligence 4.0 SonarG is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 161419...

8.2CVSS7.1AI score0.02427EPSS
SaveExploits0References2
OSV
OSV
•added 2019/08/20 8:15 p.m.•13 views

CVE-2019-4338

IBM Security Guardium Big Data Intelligence 4.0 SonarG does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417...

7.5CVSS7.1AI score0.01726EPSS
SaveExploits0References2
NVD
NVD
•added 2019/08/20 8:15 p.m.•37 views

CVE-2019-4338

IBM Security Guardium Big Data Intelligence 4.0 SonarG does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417...

7.5CVSS7.2AI score0.01726EPSS
SaveExploits0References2
NVD
NVD
•added 2019/08/20 8:15 p.m.•24 views

CVE-2019-4340

IBM Security Guardium Big Data Intelligence 4.0 SonarG is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 161419...

8.2CVSS7.3AI score0.02427EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/20 8:15 p.m.•34 views

Design/Logic Flaw

IBM Security Guardium Big Data Intelligence 4.0 SonarG does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417...

5CVSS7.1AI score0.01726EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2019/08/20 8:15 p.m.•22 views

Xxe

IBM Security Guardium Big Data Intelligence 4.0 SonarG is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 161419...

6.4CVSS7.8AI score0.02427EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/08/20 7:30 p.m.•44 views

CVE-2019-4338

IBM Security Guardium Big Data Intelligence 4.0 SonarG does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417...

7.5CVSS7.2AI score0.01726EPSS
SaveExploits0References2
CVE
CVE
•added 2019/08/20 7:30 p.m.•72 views

CVE-2019-4338

IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is affected by CVE-2019-4338 due to improper restriction of resource size/amount requested or influenced by an actor, enabling resource consumption and potential denial of service. Affected component: Guardium Big Data Intelligence 4.0 (Son...

7.5CVSS7.2AI score0.01726EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2019/08/20 7:30 p.m.•60 views

CVE-2019-4340

CVE-2019-4340 affects IBM Security Guardium Big Data Intelligence (SonarG) v4.0. It is an XML External Entity (XXE) vulnerability in XML processing that can allow a remote attacker to disclose sensitive data or exhaust memory resources. Affected product/version: Guardium Big Data Intelligence 4.0...

8.2CVSS8AI score0.02427EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/08/20 7:30 p.m.•31 views

CVE-2019-4340

IBM Security Guardium Big Data Intelligence 4.0 SonarG is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 161419...

7.1CVSS8AI score0.02427EPSS
SaveExploits0References2
NVD
NVD
•added 2019/08/20 7:15 p.m.•30 views

CVE-2019-4310

IBM Security Guardium Big Data Intelligence 4.0 SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036...

7.5CVSS7.3AI score0.02204EPSS
SaveExploits0References2
OSV
OSV
•added 2019/08/20 7:15 p.m.•14 views

CVE-2019-4310

IBM Security Guardium Big Data Intelligence 4.0 SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036...

7.5CVSS7.2AI score0.02204EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/20 7:15 p.m.•27 views

Code injection

IBM Security Guardium Big Data Intelligence 4.0 SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036...

5CVSS7.2AI score0.02204EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/08/20 6:25 p.m.•40 views

CVE-2019-4310

IBM Security Guardium Big Data Intelligence 4.0 SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036...

7.5CVSS7.2AI score0.02204EPSS
SaveExploits0References2
CVE
CVE
•added 2019/08/20 6:25 p.m.•60 views

CVE-2019-4310

CVE-2019-4310 affects IBM Security Guardium Big Data Intelligence (SonarG) 4.0. The issue is an inadequate account lockout setting that could allow a remote attacker to brute-force credentials over the network. Components/versions explicitly named: Guardium Big Data Intelligence 4.0 (SonarG). Imp...

7.5CVSS7.2AI score0.02204EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/08/20 12:00 a.m.•15 views

PT-2019-17042 · Ibm · Ibm Security Guardium Big Data Intelligence

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Big Data Intelligence version 4.0 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume...

8.2CVSS7.1AI score0.02427EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/08/20 12:00 a.m.•17 views

PT-2019-17040 · Ibm · Ibm Security Guardium Big Data Intelligence

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Big Data Intelligence version 4.0 SonarG Description: The issue is related to improper restriction of resource requests, allowing an actor to consume more resources than intended. Recommendations: For IBM Security Guardi...

7.5CVSS7.3AI score0.01726EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•6 views

CVE-2019-4338: Allocation of Resources Without Limits or Throttling

IBM Security Guardium Big Data Intelligence 4.0 SonarG does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417...

7.5CVSS5.8AI score0.01726EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•4 views

CVE-2019-4340: Improper Restriction of XML External Entity Reference

IBM Security Guardium Big Data Intelligence 4.0 SonarG is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 161419...

8.2CVSS5.8AI score0.02427EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•9 views

CVE-2019-4310: Improper Restriction of Excessive Authentication Attempts

IBM Security Guardium Big Data Intelligence 4.0 SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036...

7.5CVSS5.9AI score0.02204EPSS
SaveExploits0References2
Rows per page
Query Builder