Security Guardium

DATE	CVE	VULNERABILITY TITLE	RISK
2016-10-22	CVE-2016-0242	Information Exposure vulnerability in IBM Security Guardium 10.0/10.01/10.1 IBM Security Guardium 10.x through 10.1 before p100 allows remote authenticated users to obtain sensitive information by reading an Application Error message. network low complexity ibm CWE-200	4.3
2016-10-16	CVE-2016-0249	SQL Injection vulnerability in IBM Security Guardium SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. network low complexity ibm CWE-89	8.6
2016-09-26	CVE-2016-0248	Information Exposure vulnerability in IBM Security Guardium 10.0/9.0 IBM Security Guardium 9.0 before p700 and 10.0 before p100 allows man-in-the-middle attackers to obtain sensitive query-string information from SSL sessions via unspecified vectors. network high complexity ibm CWE-200	3.7
2016-06-29	CVE-2016-0298	Information Exposure vulnerability in IBM Security Guardium Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL. network low complexity ibm CWE-200	6.5