Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-3337 1Ibm 1Infosphere Guardium Nov 21, 2024 Sep 1, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to do...Show more IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to download arbitrary files on the system. IBM X-Force ID: 78284.Show less
CVE-2012-3336 1Ibm 1Infosphere Guardium Nov 21, 2024 Sep 1, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, mod...Show more IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282.Show less
CVE-2020-4492 1Ibm 1Spectrum Scale Jun 17, 2026 Aug 31, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a denial of service crashing the kernel by sending a subset of ioctls on the device with invalid arguments...Show more IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a denial of service crashing the kernel by sending a subset of ioctls on the device with invalid arguments. IBM X-Force ID: 181992.Show less
CVE-2020-4591 1Ibm 1Spectrum Protect Server Jun 17, 2026 Aug 28, 2020 N/A· v4 3.3 LOW· v3 1.9 LOW· v2 IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-...Show more IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-Force ID: 184746.Show less
CVE-2020-4559 1Ibm 1Spectrum Protect Jun 17, 2026 Aug 28, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force ID: 183613.
CVE-2019-4579 1Ibm 1Resilient Security Orchestration Automation And Response Jun 17, 2026 Aug 28, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 167236.
CVE-2019-4533 1Ibm 1Resilient Security Orchestration Automation And Response Jun 17, 2026 Aug 28, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation. IBM X-Force ID: 165589.
CVE-2020-4603 1Ibm 1Security Guardium Insights Jun 17, 2026 Aug 27, 2020 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force...Show more IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 184880.Show less
CVE-2020-4575 1Ibm 2Websphere Application Server Websphere Virtual Enterprise Jun 17, 2026 Aug 27, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.
CVE-2020-4175 1Ibm 1Security Guardium Insights Jun 17, 2026 Aug 27, 2020 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to...Show more IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174684.Show less
CVE-2020-4174 1Ibm 1Security Guardium Insights Jun 17, 2026 Aug 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174683.
CVE-2020-4172 1Ibm 1Security Guardium Insights Jun 17, 2026 Aug 27, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser his...Show more IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 174408.Show less
CVE-2020-4171 1Ibm 1Security Guardium Insights Jun 17, 2026 Aug 27, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174407.
CVE-2020-4169 1Ibm 1Security Guardium Insights Jun 17, 2026 Aug 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174405.
CVE-2020-4167 1Ibm 1Security Guardium Insights Jun 17, 2026 Aug 27, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 IBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or perform unauthorized actions due to improper authenciation mechanisms. IBM X-Force ID: 174403.
CVE-2020-4166 1Ibm 1Security Guardium Insights Jun 17, 2026 Aug 27, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks aga...Show more IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 174402.Show less
CVE-2019-4695 1Ibm 1Guardium Data Encryption Jun 17, 2026 Aug 26, 2020 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 171926.
CVE-2019-4713 1Ibm 2Guardium Data Encryption Guardium For Cloud Key Management Jun 17, 2026 Aug 26, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerab...Show more IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172084.Show less
CVE-2019-4701 1Ibm 2Guardium Data Encryption Guardium For Cloud Key Management Jun 17, 2026 Aug 26, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936.
CVE-2019-4699 1Ibm 2Guardium Data Encryption Guardium For Cloud Key Management Jun 17, 2026 Aug 26, 2020 N/A· v4 2.7 LOW· v3 4.0 MEDIUM· v2 IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 171931.

Previous 1...152153154...413 Next