CVE-2012-3336

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282...

Design/Logic Flaw

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on the system. IBM X-Force ID: 78284...

Sql injection

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282...

CVE-2012-3341

IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of...

CVE-2012-3341

Vulnerability summary (CVE-2012-3341) : IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is affected by cross-site scripting due to improper validation of user-supplied input. A remote attacker could lure a victim to click a specially-crafted URL, causing script execution in the browser within the...

CVE-2012-3340

IBM InfoSphere Guardium (versions 8.0, 8.01, 8.2) is affected by an XML External Entity (XXE) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker could disclose sensitive information (e.g., contents of server files such as database passwords). Root ...

CVE-2012-3340

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291...

CVE-2012-3338

Summary of CVE-2012-3338 : IBM InfoSphere Guardium (versions 8.0, 8.01, 8.2) contains an improper restriction on the create new user account functionality that could allow a remote attacker to bypass security restrictions and create unprivileged user accounts. IBM's IBM X-Force entry and the offi...

CVE-2012-3338

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286...

CVE-2012-3337

CVE-2012-3337 affects IBM InfoSphere Guardium 8.0, 8.01, and 8.2. A directory traversal flaw lets remote attackers send specially crafted URLs (../ sequences) to download arbitrary files. IBM’s advisory labels it a remote file disclosure vulnerability in Guardium. Remediation per the vendor invol...

CVE-2012-3337

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on the system. IBM X-Force ID: 78284...

CVE-2012-3336

The CVE-2012-3336 entry concerns IBM InfoSphere Guardium 8.0, 8.01, and 8.2. The vulnerability is a SQL injection in multiple Guardium scripts. A remote authenticated attacker could send specially-crafted SQL statements to these scripts, allowing view, addition, modification, or deletion of data ...

CVE-2012-3336

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282...

PT-2020-7216

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue is caused by improper validation of user-supplied input, leading to XML external entity injection. A remote authenticated attacker could exploit this to obtain sensitive...

PT-2020-7217

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 7.0 through 8.2 Description The issue is caused by improper validation of user-supplied input, leading to cross-site scripting. A remote attacker could exploit this using a specially-crafted URL to execute scri...

PT-2020-7214

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on...

CVE-2012-3338: Improper Input Validation

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286...

CVE-2012-3336: Improper Neutralization of Special Elements used in an SQL Command

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282...

CVE-2012-3341: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of...

CVE-2012-3337: Improper Limitation of a Pathname to a Restricted Directory

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on the system. IBM X-Force ID: 78284...