SG
Product
Security Guardium
112
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 40Medium 58Low 5
Watch
Add Security Guardium to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-25029 | 6.5 | May 28 | IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input Affected: 12.0 |
| CVE-2023-47711 | 6.5 | May 14 | IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow an authenticated user to upload files that would cause a denial of service Affected: 11.3; 11.4; 11.5; 12.0 |
| CVE-2022-43903 | 6.5 | Sep 5 | IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to improper input validation Affected: 10.6; 11.3; 11.4 |
| CVE-2022-43908 | 6.5 | Jul 19 | IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validation Affected: 11.3 |
| CVE-2021-20433 | 6.5 | Sep 15 | IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in further attacks against the system Affected: 11.3 |
| CVE-2020-4307 | 6.5 | Jun 3 | IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack Affected: 11.1 |
| CVE-2017-1258 | 6.5 | Jul 5 | IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas Affected: 10.0; 10.0.1; 10.1; 10.1.2 |
| CVE-2016-0298 | 6.5 | Jun 29 | Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL Affected: through 10.0 |
| CVE-2021-39074 | 6.1 | Jun 29 | IBM Security Guardium 11.4 is vulnerable to cross-site scripting Affected: 11.4 |
| CVE-2021-20386 | 6.1 | May 24 | IBM Security Guardium 11.2 is vulnerable to cross-site scripting Affected: 11.2 |
| CVE-2020-4183 | 6.1 | Jun 4 | IBM Security Guardium 11.1 is vulnerable to cross-site scripting Affected: 11.1 |
| CVE-2020-4182 | 6.1 | Jun 3 | IBM Security Guardium 11.1 is vulnerable to cross-site scripting Affected: 11.1 |
| CVE-2018-1817 | 6.1 | Dec 13 | IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting Affected: 10.0 through 10.5 |
| CVE-2017-1262 | 6.1 | Dec 20 | IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks Affected: 10.0; 10.0.1; 10.1.0; 10.1.2; 10.1.3 |
| CVE-2017-1256 | 6.1 | Jul 5 | IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting Affected: 10.0; 10.1 |
| CVE-2016-0246 | 6.1 | Oct 22 | Cross-site scripting (XSS) vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject… Affected: 8.2; 9.0; 9.1; 9.5; 10.0; 10.1; +1 more |
| CVE-2021-39072 | 5.9 | Apr 19 | IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security Affected: 11.3 |
| CVE-2017-1265 | 5.9 | Dec 17 | IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate Affected: 10.0 through 10.5 |
| CVE-2025-3440 | 5.5 | May 15 | IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting Affected: 11.5; 12.0 |
| CVE-2017-1596 | 5.5 | Dec 20 | IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors Affected: 10.0; 10.0.1; 10.1.0; 10.1.2; 10.1.3 |
| CVE-2017-1595 | 5.5 | Dec 20 | IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors Affected: 10.0; 10.0.1; 10.1.0; 10.1.2; 10.1.3 |
| CVE-2024-49336 | 5.4 | Dec 19 | IBM Security Guardium server-side request forgery Affected: 11.5, 12.0 |
| CVE-2023-47710 | 5.4 | May 24 | IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting Affected: 11.4; 11.5; 12.0 |
| CVE-2023-33852 | 5.4 | Aug 27 | IBM Security Guardium 11.4 is vulnerable to SQL injection Affected: 11.4 |
| CVE-2023-30436 | 5.4 | Aug 27 | IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting Affected: 11.3; 11.4; 11.5 |
| CVE-2023-30435 | 5.4 | Aug 27 | IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting Affected: 11.3; 11.4; 11.5 |
| CVE-2022-43909 | 5.4 | Aug 27 | IBM Security Guardium 11.4 is vulnerable to cross-site scripting Affected: 11.4 |
| CVE-2021-29735 | 5.4 | Nov 8 | IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting Affected: 10.5; 10.6; 11.0; 11.1; 11.2; 11.3 |
| CVE-2021-29773 | 5.4 | Sep 15 | IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object… Affected: 10.6; 11.3 |
| CVE-2020-4681 | 5.4 | Oct 12 | IBM Security Guardium 11.2 is vulnerable to cross-site scripting Affected: 11.2 |
| CVE-2020-4680 | 5.4 | Oct 12 | IBM Security Guardium 11.2 is vulnerable to cross-site scripting Affected: 11.2 |
| CVE-2018-1891 | 5.4 | Dec 17 | IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting Affected: 10.0 through 10.5 |
| CVE-2018-1889 | 5.4 | Dec 17 | IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting Affected: 10.0 through 10.5 |
| CVE-2017-1600 | 5.4 | Dec 20 | IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting Affected: 10.0; 10.0.1; 10.1.0; 10.1.2; 10.1.3 |
| CVE-2017-1266 | 5.4 | Dec 20 | IBM Security Guardium 10.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors Affected: 10.0; 10.0.1; 10.1.0; 10.1.2; 10.1.3 |
| CVE-2025-25025 | 5.3 | May 28 | IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 12.0 |
| CVE-2022-43906 | 5.3 | Oct 4 | IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie Affected: 11.5 |
| CVE-2023-30437 | 5.3 | Aug 27 | IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request Affected: 11.3; 11.4; 11.5 |
| CVE-2021-20428 | 5.3 | May 24 | IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 11.2 |
| CVE-2020-4186 | 5.3 | Jul 30 | IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system Affected: 10.5; 10.6; 11.1 |
| CVE-2020-4188 | 5.3 | Jun 23 | IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbers Affected: 10.6; 11.1 |
| CVE-2020-4187 | 5.3 | Jun 3 | IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system Affected: 11.1 |
| CVE-2017-1272 | 5.3 | Dec 17 | IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters Affected: 10.0 through 10.5 |
| CVE-2025-25023 | 4.9 | Apr 9 | IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect privilege assignment Affected: 11.4 through 12.1 |
| CVE-2022-39166 | 4.9 | Dec 20 | IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response Affected: 11.4 |
| CVE-2020-4678 | 4.9 | Oct 12 | IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would not have access to Affected: 11.2 |
| CVE-2020-4679 | 4.8 | Oct 12 | IBM Security Guardium 11.2 is vulnerable to cross-site scripting Affected: 11.2 |
| CVE-2023-47717 | 4.4 | May 16 | IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service Affected: 12.0 |
| CVE-2021-39077 | 4.4 | Nov 3 | IBM Security Guardium information disclosure Affected: 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, 11.4 |
| CVE-2021-39078 | 4.4 | Apr 19 | IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user Affected: 10.5 |