Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
IbmGuardium Data Encryption

29 matches found

CVE
CVE•added 2022/02/18 6:15 p.m.•82 views

CVE-2021-39026

IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniq...

5.9CVSS5.4AI score0.00056EPSS
CVE
CVE•added 2022/03/10 8:15 p.m.•79 views

CVE-2021-39022

IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software. IBM X-Force ...

8.8CVSS8.3AI score0.00101EPSS
CVE
CVE•added 2022/03/10 8:15 p.m.•74 views

CVE-2021-39025

IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863.

5.3CVSS5AI score0.00075EPSS
CVE
CVE•added 2022/05/05 4:15 p.m.•66 views

CVE-2021-39020

IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855.

5.3CVSS4.9AI score0.0008EPSS
CVE
CVE•added 2022/05/06 4:15 p.m.•66 views

CVE-2021-39023

IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213860.

7.5CVSS6.9AI score0.00133EPSS
CVE
CVE•added 2022/05/10 4:15 p.m.•60 views

CVE-2021-39024

IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

6.1CVSS5.8AI score0.00065EPSS
CVE
CVE•added 2022/05/06 4:15 p.m.•56 views

CVE-2021-39027

IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865.

5CVSS5AI score0.00096EPSS
CVE
CVE•added 2022/02/04 10:32 p.m.•55 views

CVE-2021-39021

IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which could facilitate username enumeration. IBM X-Force ID: 213856.

5.3CVSS5AI score0.00088EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•45 views

CVE-2019-4694

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171832.

9.8CVSS9AI score0.00058EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•43 views

CVE-2019-4689

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

7.5CVSS7.5AI score0.00057EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•42 views

CVE-2019-4713

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172084.

9CVSS8.5AI score0.07747EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•41 views

CVE-2019-4686

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the in...

5.3CVSS5.7AI score0.00041EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•41 views

CVE-2019-4699

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 171931.

4CVSS4.8AI score0.00076EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•40 views

CVE-2019-4697

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 171938.

6.5CVSS6.6AI score0.00079EPSS
CVE
CVE•added 2021/06/28 4:15 p.m.•40 views

CVE-2021-20413

IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196212.

5CVSS4.8AI score0.0009EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•38 views

CVE-2019-4688

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the in...

4.3CVSS5AI score0.00088EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•37 views

CVE-2019-4701

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936.

5.3CVSS5.9AI score0.00075EPSS
CVE
CVE•added 2020/08/26 8:15 p.m.•36 views

CVE-2019-4695

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 171926.

4CVSS4.3AI score0.00024EPSS
CVE
CVE•added 2021/07/07 5:15 p.m.•36 views

CVE-2021-20378

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 195709.

8.8CVSS8.2AI score0.00099EPSS
CVE
CVE•added 2021/07/07 5:15 p.m.•35 views

CVE-2021-20379

IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195711.

7.5CVSS7.4AI score0.00047EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•34 views

CVE-2019-4691

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.6AI score0.00062EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•34 views

CVE-2019-4692

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 171829.

5.3CVSS5.5AI score0.00075EPSS
CVE
CVE•added 2021/07/07 5:15 p.m.•33 views

CVE-2021-20474

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

7.5CVSS7.8AI score0.00044EPSS
CVE
CVE•added 2021/07/12 4:15 p.m.•32 views

CVE-2021-20414

IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216.

4.9CVSS4.7AI score0.00102EPSS
CVE
CVE•added 2021/07/07 5:15 p.m.•31 views

CVE-2021-20415

IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196217.

7.5CVSS7.2AI score0.00091EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•30 views

CVE-2019-4698

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 171929.

7.5CVSS7.5AI score0.0011EPSS
CVE
CVE•added 2020/08/26 7:15 p.m.•29 views

CVE-2019-4693

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 171831.

6CVSS5AI score0.00019EPSS
CVE
CVE•added 2021/07/07 5:15 p.m.•28 views

CVE-2021-20416

IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 196218.

5.3CVSS5.6AI score0.00094EPSS
CVE
CVE•added 2021/07/07 5:15 p.m.•28 views

CVE-2021-20417

IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196219

4.3CVSS4.5AI score0.0005EPSS