Vulnerabilities > IBM > Security Guardium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-04-19 | CVE-2021-39078 | Cleartext Storage of Sensitive Information vulnerability in IBM Security Guardium 10.5 IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. | 2.1 |
| 2021-11-08 | CVE-2021-29735 | Cross-site Scripting vulnerability in IBM Security Guardium IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting. | 3.5 |
| 2021-09-23 | CVE-2020-4690 | Use of Hard-coded Credentials vulnerability in IBM Security Guardium 11.3 IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. | 7.5 |
| 2021-09-23 | CVE-2021-20377 | Information Exposure Through an Error Message vulnerability in IBM Security Guardium 11.3 IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. | 4.0 |
| 2021-09-15 | CVE-2021-20433 | Unspecified vulnerability in IBM Security Guardium 11.3 IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in further attacks against the system. | 4.0 |
| 2021-09-15 | CVE-2021-29773 | Authorization Bypass Through User-Controlled Key vulnerability in IBM Security Guardium 10.6/11.3 IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). | 5.5 |
| 2021-05-24 | CVE-2020-4990 | SQL Injection vulnerability in IBM Security Guardium 11.2 IBM Security Guardium 11.2 is vulnerable to SQL injection. | 6.5 |
| 2021-05-24 | CVE-2021-20385 | Unspecified vulnerability in IBM Security Guardium 11.2 IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. | 9.0 |
| 2021-05-24 | CVE-2021-20386 | Cross-site Scripting vulnerability in IBM Security Guardium 11.2 IBM Security Guardium 11.2 is vulnerable to cross-site scripting. | 4.3 |
| 2021-05-24 | CVE-2021-20389 | Insufficiently Protected Credentials vulnerability in IBM Security Guardium 11.2 IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. | 2.1 |