SG
Product
Security Guardium Big Data Intelligence
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 11Low 1
Watch
Add Security Guardium Big Data Intelligence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4340 | 8.2 | Aug 20 | IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 4.0 |
| CVE-2018-1377 | 7.8 | Feb 26 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores user credentials in plain in clear text which can be read by a local user Affected: 3.1 |
| CVE-2020-4254 | 7.5 | Oct 16 | IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 1.0 |
| CVE-2019-4339 | 7.5 | Oct 29 | IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 4.0 |
| CVE-2019-4314 | 7.5 | Oct 29 | IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource that might be accessible to another control sphere Affected: 4.0 |
| CVE-2019-4338 | 7.5 | Aug 20 | IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor Affected: 4.0 |
| CVE-2019-4310 | 7.5 | Aug 20 | IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials Affected: 4.0 |
| CVE-2018-1375 | 7.5 | May 29 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking… Affected: 3.1 |
Showing 8