Vulnerabilities > IBM > Security Guardium > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-10-12 CVE-2020-4689 Improper Neutralization of Formula Elements in a CSV File vulnerability in IBM Security Guardium 11.2
IBM Security Guardium 11.2 is vulnerable to CVS Injection.
network
low complexity
ibm CWE-1236
6.8
2020-10-12 CVE-2020-4681 Cross-site Scripting vulnerability in IBM Security Guardium 11.2
IBM Security Guardium 11.2 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2020-10-12 CVE-2020-4680 Cross-site Scripting vulnerability in IBM Security Guardium 11.2
IBM Security Guardium 11.2 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2020-10-12 CVE-2020-4679 Cross-site Scripting vulnerability in IBM Security Guardium 11.2
IBM Security Guardium 11.2 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
4.8
2020-10-12 CVE-2020-4678 Unspecified vulnerability in IBM Security Guardium 11.2
IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would not have access to.
network
low complexity
ibm
4.9
2020-07-30 CVE-2020-4186 Information Exposure vulnerability in IBM Security Guardium 10.5/10.6/11.1
IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system.
network
low complexity
ibm CWE-200
5.3
2020-06-23 CVE-2020-4188 Use of Insufficiently Random Values vulnerability in IBM Security Guardium 10.6/11.1
IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbers.
network
low complexity
ibm CWE-330
5.3
2020-06-04 CVE-2020-4191 Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Security Guardium 11.1
IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
local
low complexity
ibm CWE-327
4.4
2020-06-04 CVE-2020-4183 Cross-site Scripting vulnerability in IBM Security Guardium 11.1
IBM Security Guardium 11.1 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1
2020-06-03 CVE-2020-4307 Unspecified vulnerability in IBM Security Guardium 11.1
IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack.
low complexity
ibm
6.5