Vulnerabilities > IBM > Security Guardium Insights > 3.0.0

DATE CVE VULNERABILITY TITLE RISK
2022-01-26 CVE-2021-29838 Information Exposure vulnerability in IBM Security Guardium Insights 3.0.0
IBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.
network
high complexity
ibm CWE-200
5.9
5.9
2022-01-26 CVE-2021-29845 Improper Input Validation vulnerability in IBM Security Guardium Insights 3.0.0
IBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized actions due to improper input validation.
network
low complexity
ibm CWE-20
8.8
8.8
2022-01-26 CVE-2021-29846 Insufficient Session Expiration vulnerability in IBM Security Guardium Insights 3.0.0
IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.
network
low complexity
ibm CWE-613
2.7
2.7