Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

112 records

Vendor: IBM Component: Security Guardium Clear all filters
TI-2025-18704 CVE-2025-25029 · GHSA-q935-66v8-qqrq

IBM Security Guardium information disclosure

Priority LOW 29

IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00417 Published 2025-05-28 No fix listed CWE-116
TI-2025-18703 CVE-2025-25026 · GHSA-q22r-fww9-4hjr

IBM Security Guardium information disclosure

Priority LOW 20

IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00294 Published 2025-05-28 No fix listed CWE-863
TI-2025-18702 CVE-2025-25025 · GHSA-549c-hv52-vxvm

IBM Security Guardium information disclosure

Priority LOW 24

IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00368 Published 2025-05-28 No fix listed CWE-209
TI-2025-03023 CVE-2025-3440 · GHSA-jqjm-72wg-wcxg

IBM Security Guardium cross-site scripting

Priority LOW 24

IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00251 Published 2025-05-15 No fix listed CWE-79
TI-2025-18701 CVE-2025-25023 · GHSA-223p-m2w6-92v2

IBM Security Guardium information disclosure

Priority LOW 22

IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect privilege assignment.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00365 Published 2025-04-09 No fix listed CWE-266
TI-2024-32929 CVE-2024-49336 · GHSA-j5p5-v7rm-vgw7

IBM Security Guardium server-side request forgery

Priority LOW 34

IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00223 Published 2024-12-19 No fix listed CWE-918
TI-2023-25846 CVE-2023-47710

IBM Security Guardium cross-site scripting

Priority LOW 24

IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00249 Published 2024-05-24 No fix listed CWE-79
TI-2023-25852 CVE-2023-47717 · GHSA-h7gj-99ph-4f34

IBM Security Guardium denial of service

Priority LOW 20

IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00167 Published 2024-05-16 No fix listed CWE-770
TI-2023-25847 CVE-2023-47711 · GHSA-3mwv-hr6q-qhg5

IBM Security Guardium denial of service

Priority LOW 30

IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow an authenticated user to upload files that would cause a denial of service.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00684 Published 2024-05-11 No fix listed CWE-434
TI-2023-25848 CVE-2023-47712 · GHSA-wxcf-6q4p-3735

IBM Security Guardium privilege escalation

Priority LOW 35

IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a local user to gain elevated privileges on the system due to improper permissions control.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2024-05-11 No fix listed CWE-732
TI-2023-25845 CVE-2023-47709 · GHSA-h399-7836-2p9c

IBM Security Guardium command injection

Priority MEDIUM 43

IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01044 Published 2024-05-11 No fix listed CWE-78
TI-2023-22382 CVE-2023-42004 · GHSA-3g3f-pff6-g3m3

IBM Security Guardium CSV injection

Priority MEDIUM 42

IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01063 Published 2023-11-28 No fix listed CWE-1236
TI-2022-21561 CVE-2022-43906 · GHSA-gwc8-2896-j47c

IBM Security Guardium information disclosure

Priority LOW 24

IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00466 Published 2023-10-04 No fix listed
TI-2022-21559 CVE-2022-43903 · GHSA-3jvx-6m6x-8g45

IBM Security Guardium denial of service

Priority LOW 30

IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to improper input validation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00712 Published 2023-09-04 No fix listed CWE-20
TI-2022-21560 CVE-2022-43904 · GHSA-f68g-gx28-g956

IBM Security Guardium information disclosure

Priority MEDIUM 40

IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00774 Published 2023-08-27 No fix listed CWE-307
TI-2023-16728 CVE-2023-33852 · GHSA-phcx-274w-8jq6

IBM Security Guardium SQL injection

Priority LOW 34

IBM Security Guardium 11.4 is vulnerable to SQL injection.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00559 Published 2023-08-27 No fix listed CWE-89
TI-2022-21564 CVE-2022-43909 · GHSA-74jf-8355-xvr5

IBM Security Guardium cross-site scripting

Priority LOW 25

IBM Security Guardium 11.4 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00371 Published 2023-08-27 No fix listed CWE-79
TI-2022-21562 CVE-2022-43907 · GHSA-w2mg-fph6-7hxv

IBM Security Guardium command execution

Priority MEDIUM 43

IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01324 Published 2023-08-27 No fix listed CWE-78
TI-2023-14279 CVE-2023-30437 · GHSA-69hj-qg9v-rx7w

IBM Security Guardium information disclosure

Priority LOW 31

IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00605 Published 2023-08-27 No fix listed
TI-2023-14278 CVE-2023-30436 · GHSA-7rww-mg5q-jm5c

IBM Security Guardium cross-site scripting

Priority LOW 25

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00337 Published 2023-08-27 No fix listed CWE-79
TI-2023-14277 CVE-2023-30435 · GHSA-8g6x-r9qr-r48h

IBM Security Guardium cross-site scripting

Priority MEDIUM 41

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting.

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.00422 Published 2023-08-27 No fix listed CWE-79
TI-2023-17961 CVE-2023-35893 · GHSA-9qr7-p3xx-g5rx

IBM Security Guardium command execution

Priority MEDIUM 46

IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01396 Published 2023-08-16 No fix listed CWE-78
TI-2022-21565 CVE-2022-43910 · GHSA-q72f-wgf9-7vp7

IBM Security Guardium privilege escalation

Priority LOW 38

IBM Security Guardium 11.3 could allow a local user to escalate their privileges due to improper permission controls.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00168 Published 2023-07-19 No fix listed CWE-281
TI-2022-21563 CVE-2022-43908 · GHSA-7vfp-8536-jvm3

IBM Security Guardium denial of service

Priority LOW 30

IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00712 Published 2023-07-19 No fix listed CWE-20
TI-2022-06637 CVE-2022-22307 · GHSA-x8rx-wq78-x445

IBM Security Guardium privilege escalation

Priority LOW 35

IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-06-15 No fix listed CWE-863
Load more