CVE-2016-0247

CVE-2016-0247 affects IBM Security Guardium: local users can obtain sensitive information (passwords in clear text) via unspecified vectors. Affected versions include Guardium 8.2 (before p310), 9.x (through 9.5 before p700), and 10.x (through 10.1 before p100). IBM notes the issue as a password-...

CVE-2016-0328

IBM Security Guardium Database Activity Monitor is affected by CVE-2016-0328: versions 8.2 before p310, 9.x up to 9.5 before p700, and 10.x up to 10.1 before p100 allow a local user to inject commands that would be executed with administrator privileges. The vulnerability is categorized as Execut...

CVE-2016-0239: Undefined Security Weakness

IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allows remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors...

CVE-2016-0240: Undefined Security Weakness

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP...

CVE-2016-0241: Improper Access Control

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP...

CVE-2016-0242: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Guardium 10.x through 10.1 before p100 allows remote authenticated users to obtain sensitive information by reading an Application Error message...

CVE-2016-0328: Improper Neutralization of Special Elements used in a Command

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain administrator privileges for command execution via unspecified vectors...

CVE-2016-0246: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0247: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain sensitive cleartext information via unspecified vectors, as demonstrated by password information...

PT-2016-4108

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor versions 8.2 before p310 IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 IBM Security Guardium Database Activity Monitor versions 10.x through 10.1 before p10...

PT-2016-4106

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 IBM Security Guardium Database Activity Monitor versions 10.x through 10.0.1 before p100 Description The issue allows remote authenticated users to make HTTP...

PT-2016-4109

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 10.x through 10.1 before p100 Description The issue allows remote authenticated users to obtain sensitive information by reading an Application Error message. Recommendations For IBM Security Guardium versions 10...

PT-2016-4110

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 8.2 before p310 IBM Security Guardium versions 9.x through 9.5 before p700 IBM Security Guardium versions 10.x through 10.1 before p100 Description A cross-site scripting XSS issue allows remote attackers to inje...

PT-2016-4111

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 8.2 before p310 IBM Security Guardium versions 9.x through 9.5 before p700 IBM Security Guardium versions 10.x through 10.1 before p100 Description The issue allows local users to obtain sensitive cleartext...

PT-2016-4107

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor versions 8.2 before p310 IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 IBM Security Guardium Database Activity Monitor versions 10.x through 10.1 before p10...

PT-2016-4150

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor versions 8.2 before p310 IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 IBM Security Guardium Database Activity Monitor versions 10.x through 10.1 before p10...

CVE-2016-0236

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field...

CVE-2016-0236

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field...

CVE-2016-0236

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field...

CVE-2016-0236

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field...