IBM / Security Guardium Data Encryption
20 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2021-39025 | IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863. | MEDIUM | 5.3 | Mar 10, 2022 |
| CVE-2021-39022 | IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or i… | HIGH | 8.8 | Mar 10, 2022 |
| CVE-2021-39026 | IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable… | MEDIUM | 5.9 | Feb 18, 2022 |
| CVE-2021-39021 | IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an una… | MEDIUM | 5.3 | Feb 4, 2022 |
| CVE-2019-4702 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or mod… | HIGH | 8.1 | Jan 13, 2021 |
| CVE-2019-4687 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized par… | MEDIUM | 5.3 | Jan 13, 2021 |
| CVE-2019-4160 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… | HIGH | 7.5 | Jan 13, 2021 |
| CVE-2019-4695 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 1719… | LOW | 3.3 | Aug 26, 2020 |
| CVE-2019-4713 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a speci… | HIGH | 8.8 | Aug 26, 2020 |
| CVE-2019-4701 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936. | MEDIUM | 5.3 | Aug 26, 2020 |
| CVE-2019-4699 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated… | LOW | 2.7 | Aug 26, 2020 |
| CVE-2019-4698 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to… | HIGH | 7.5 | Aug 26, 2020 |
| CVE-2019-4697 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID:… | MEDIUM | 6.5 | Aug 26, 2020 |
| CVE-2019-4694 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound… | CRITICAL | 9.8 | Aug 26, 2020 |
| CVE-2019-4693 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID… | MEDIUM | 4.4 | Aug 26, 2020 |
| CVE-2019-4692 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks… | MEDIUM | 5.3 | Aug 26, 2020 |
| CVE-2019-4691 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i… | MEDIUM | 5.4 | Aug 26, 2020 |
| CVE-2019-4689 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTT… | HIGH | 7.5 | Aug 26, 2020 |
| CVE-2019-4688 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get… | MEDIUM | 4.3 | Aug 26, 2020 |
| CVE-2019-4686 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get… | MEDIUM | 5.3 | Aug 26, 2020 |
Showing 1 to 20 of 20 CVEs