Ibm Security Guardium vulnerabilities

CVE-2025-3440 [MEDIUM] CWE-79 CVE-2025-3440: IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CVE-2023-30436 [MEDIUM] CWE-79 CVE-2023-30436: IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 252292.

CVE-2023-47710 [MEDIUM] CWE-79 CVE-2023-47710: IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 271525.

CVE-2022-43906 [MEDIUM] CVE-2022-43906: IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSit IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 240897.

CVE-2020-4307 [MEDIUM] CVE-2020-4307: IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr da IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. IBM X-Force ID: 176997.

CVE-2017-1256 [MEDIUM] CWE-79 CVE-2017-1256: IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows us IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124678

CVE-2018-1889 [MEDIUM] CWE-79 CVE-2018-1889: IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152080.

CVE-2018-1891 [MEDIUM] CWE-79 CVE-2018-1891: IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows u IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152082.

CVE-2020-4186 [MEDIUM] CWE-200 CVE-2020-4186: IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page th IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174804.

CVE-2020-4680 [MEDIUM] CWE-79 CVE-2020-4680: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186426.

CVE-2020-4681 [MEDIUM] CWE-79 CVE-2020-4681: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186427.

CVE-2017-1600 [MEDIUM] CWE-79 CVE-2017-1600: IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vul IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132613.

CVE-2022-43909 [MEDIUM] CWE-79 CVE-2022-43909: IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 240905.

CVE-2025-25025 [MEDIUM] CWE-209 CVE-2025-25025: IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a deta IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

CVE-2025-25023 [MEDIUM] CWE-266 CVE-2025-25023: IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect privilege assignment.

CVE-2017-1595 [MEDIUM] CWE-200 CVE-2017-1595: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly s IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132549.

CVE-2017-1596 [MEDIUM] CWE-200 CVE-2017-1596: IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly s IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132550.

CVE-2022-39166 [MEDIUM] CWE-200 CVE-2022-39166: IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IBM X-Force ID: 235405.

CVE-2020-4679 [MEDIUM] CWE-79 CVE-2020-4679: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186424.

CVE-2021-20420 [MEDIUM] CVE-2021-20420: IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in further attacks against the system. IBM X-Force ID: 196281.