Guardium Data Encryption@4.0.0 Security Vulnerabilities and Issues — Guardium Data Encryption@4.0.0 CVE List

Lucene search

IbmGuardium Data Encryption4.0.0

4 matches found

CVE•added 2022/05/05 4:15 p.m.•66 views

CVE-2021-39020

IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855.

5.3CVSS4.9AI score0.0008EPSS

CVE•added 2022/05/06 4:15 p.m.•66 views

CVE-2021-39023

IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213860.

7.5CVSS6.9AI score0.00133EPSS

CVE•added 2022/05/10 4:15 p.m.•60 views

CVE-2021-39024

IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

6.1CVSS5.8AI score0.00065EPSS

CVE•added 2022/05/06 4:15 p.m.•56 views

CVE-2021-39027

IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865.

5CVSS5AI score0.00096EPSS