Lucene search
K

205 matches found

NVD
NVD
added 2026/05/27 2:17 p.m.6 views

CVE-2026-8405

IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" LTR can expose sensitive credentials in debug mode...

6.5CVSS0.00032EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 1:20 p.m.5 views

CVE-2026-8405

IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" LTR can expose sensitive credentials in debug mode...

6.5CVSS5.8AI score0.00032EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/05/01 2:47 a.m.2 views

CVE-2026-4918

IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

5.5CVSS5AI score0.00034EPSS
Exploits0References1
NVD
NVD
added 2026/04/23 12:16 a.m.2 views

CVE-2026-1726

IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1...

4.8CVSS0.00011EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/23 12:0 a.m.2 views

IBM Guardium Key Lifecycle Manager 安全漏洞

IBM Guardium Key Lifecycle Manager is a key management system provided by IBM that offers capabilities for generating, distributing, and managing encrypted keys. There is a security vulnerability in IBM Guardium Key Lifecycle Manager, which stems from improper permission management. This...

4.8CVSS5.8AI score0.00011EPSS
Exploits0References2
CVE
CVE
added 2026/04/22 11:42 p.m.7 views

CVE-2026-1726

CVE-2026-1726 affects IBM Guardium Key Lifecycle Manager (GKLM) versions 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1. The IBM security bulletin lists this CVE under CWE-269: Improper Privilege Management, with a IBM CVSS base score of 6.4 (vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N). The conne...

4.8CVSS5.7AI score0.00011EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/22 11:23 p.m.2 views

CVE-2026-4919

IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

4.8CVSS5.5AI score0.00034EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/22 11:23 p.m.1 views

CVE-2026-4919 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

4.8CVSS5.5AI score0.00034EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/22 4:28 p.m.3 views

Security Bulletin: IBM Guardium Data Protection is affected by a spring-security-config-5.8.14.jar vulnerability (CVE-2024-38827)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2024-38827 DESCRIPTION: The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working...

4.8CVSS7.1AI score0.00399EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/11 8:38 p.m.9 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-55163 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset...

8.8CVSS7.7AI score0.00673EPSS
Exploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/06 9:2 a.m.4 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)

Summary IBM Db2 is shipped as a component of IBM Guardium Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

8.2CVSS5.7AI score0.00235EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/02 2:44 p.m.8 views

Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities

Summary IBM Guardium Data Security Center has addressed these vulnerabilties with an update. Vulnerability Details CVEID:CVE-2026-23490 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malforme...

8.1CVSS6AI score0.01387EPSS
Exploits2Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:32 a.m.0 views

CVE-2023-25922

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247621...

8.8CVSS4.8AI score0.00061EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:32 a.m.2 views

CVE-2023-25924

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630...

8.8CVSS6.4AI score0.00204EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/13 8:59 p.m.15 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-31650 DESCRIPTION: Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up ...

8.8CVSS7.4AI score0.21423EPSS
Exploits8Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2020-25420

Malware in sbrugna...

4.3CVSS4.2AI score0.00172EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-25463

Malware in sbrugna...

5.9CVSS5.9AI score0.00042EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-25462

Malware in sbrugna...

5.3CVSS5.5AI score0.00075EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-25461

Malware in sbrugna...

6.1CVSS5.2AI score0.00065EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-25460

Malware in sbrugna...

7.5CVSS4.2AI score0.00133EPSS
Exploits0References3
Rows per page
Query Builder