Lucene search
+L

2498 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2023/12/19 3:33 p.m.42 views

Security Bulletin: IBM Security Guardium is affected by a denial of service vulnerability in Apache Struts (CVE-2023-34149)

Summary IBM Security Guardium has addressed this vulnerability with an update. Vulnerability Details CVEID:CVE-2023-34149 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by a flaw with only handling setProperty but not getProperty. By sending a specially crafted request, a...

6.5CVSS5.5AI score0.05403EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2023/12/19 12:0 a.m.11 views

IBM Security Guardium 输入验证错误漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An input validation error vulnerability exists in IBM...

4.3CVSS6.5AI score0.00519EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/19 12:0 a.m.7 views

IBM Security Guardium Code Issue Vulnerability

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as customizable UI, report management, and streamlined audit process building. A code issue vulnerability exists in IBM Security...

8.8CVSS6.8AI score0.00843EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/19 12:0 a.m.7 views

IBM Security Guardium Security Vulnerabilities

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as customized UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardiu...

5.3CVSS6.5AI score0.00757EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/19 12:0 a.m.8 views

IBM Security Guardium Cross-Site Scripting Vulnerability

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as customizable UI, report management, and streamlined audit process building. A cross-site scripting vulnerability exists in IBM...

5.4CVSS6.1AI score0.00441EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/19 12:0 a.m.7 views

IBM Security Guardium 路径遍历漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A path traversal vulnerability exists in IBM Security...

9.1CVSS6.6AI score0.00975EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/12/14 6:36 p.m.42 views

Security Bulletin: IBM Security Guardium is affected by a snowflake-jdbc-3.13.8.jar vulnerability (CVE-2023-30535)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID:CVE-2023-30535 DESCRIPTION: Snowflake Computing Snowflake JDBC could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by a command injection flaw in the SSO URL...

8.8CVSS8.3AI score0.01668EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/12/14 6:33 p.m.56 views

Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities in Oracle MySQL Server

Summary IBM Security Guardium has released an update to address these vulnerabilities. Vulnerability Details CVEID:CVE-2023-21940 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the Server: Components Services component could allow a remote authenticated attacker to...

7.5CVSS5.6AI score0.01501EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/12/14 7:21 a.m.33 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager

Summary IBM Db2 is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Db2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

7.5CVSS7.5AI score0.01104EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/12/06 8:44 a.m.86 views

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and IBM WebSphere Liberty shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2023-22081, CVE-2023-5676)

Summary IBM WebSphere Application Server and IBM WebSphere Liberty is shipped as a component of IBM Security Guardium Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM WebSphere Application Server and IBM WebSphere Liberty has been published in a...

5.9CVSS6AI score0.01412EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2023/11/30 12:0 a.m.8 views

IBM Security Guardium CSV Injection Vulnerability (CNVD-2023-9528503)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A CSV injection vulnerability exists in IBM Security Guardi...

8.8CVSS7.1AI score0.01054EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/28 11:15 a.m.10 views

CVE-2023-42004

IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper validation of csv file contents. IBM X-Force ID: 265262...

8.8CVSS5.9AI score0.01054EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/28 11:15 a.m.21 views

CVE-2023-42004

IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper validation of csv file contents. IBM X-Force ID: 265262...

8.8CVSS0.01054EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/28 11:15 a.m.25 views

Input validation

IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper validation of csv file contents. IBM X-Force ID: 265262...

6.8CVSS7.5AI score0.01054EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/28 10:52 a.m.27 views

CVE-2023-42004 IBM Security Guardium CSV injection

IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper validation of csv file contents. IBM X-Force ID: 265262...

8CVSS8.8AI score0.01054EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/11/28 10:52 a.m.9 views

CVE-2023-42004 IBM Security Guardium CSV injection

IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper validation of csv file contents. IBM X-Force ID: 265262...

8CVSS7.3AI score0.01054EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/28 10:52 a.m.89 views

CVE-2023-42004

IBM Security Guardium versions 11.3, 11.4, and 11.5 are affected by CVE-2023-42004, a CSV injection vulnerability due to improper validation of CSV file contents. A remote attacker could execute malicious commands via crafted CSV data, with high impact on confidentiality, integrity, and availabil...

8.8CVSS8.2AI score0.01054EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/11/28 12:0 a.m.7 views

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A CSV injection vulnerability exists in IBM Security Guardi...

8.8CVSS7.3AI score0.01054EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/27 12:0 a.m.12 views

PT-2023-8756 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 11.3 through 11.5 Description: The issue is related to improper validation of csv file contents, which could allow a remote attacker to execute malicious commands. This is due to the lack of neutralization of...

10CVSS8.5AI score0.01054EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2023/11/23 6:20 a.m.50 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager

Summary IBM Db2 is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Db2 has been published in security bulletins mentioned below. Vulnerability Details Refer to the security bulletins listed in the...

7.5CVSS7.2AI score0.0117EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder