IBM Security Guardium 10.5

CPE Details

IBM Security Guardium 10.5
ibm
security_guardium
10.5
2019-03-15
15h27 +00:00
2019-03-15
15h27 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ibm:security_guardium:10.5:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

security_guardium

Version

10.5

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-39077 2022-11-02 23h00 +00:00 IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587.  
4.4
Moyen
CVE-2021-39078 2022-04-19 16h15 +00:00 IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589.
4.4
Moyen
CVE-2021-39076 2022-04-19 16h15 +00:00 IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585.
7.5
Haute
CVE-2021-29735 2021-11-08 16h50 +00:00 IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
5.4
Moyen
CVE-2018-1501 2020-08-26 19h00 +00:00 IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missing security controls. IBM X-Force ID: 141226.
7.5
Haute
CVE-2020-4186 2020-07-30 12h55 +00:00 IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174804.
5.3
Moyen
CVE-2020-4185 2020-07-30 12h55 +00:00 IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174803.
7.5
Haute
CVE-2019-4292 2019-07-02 15h05 +00:00 IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable web server. IBM X-Force ID: 160698.
8.8
Haute
CVE-2017-1265 2018-12-17 16h00 +00:00 IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) techniques. IBM X-Force ID: 124740.
5.9
Moyen
CVE-2017-1272 2018-12-17 16h00 +00:00 IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747.
5.3
Moyen
CVE-2017-1597 2018-12-17 16h00 +00:00 IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132610.
7.5
Haute
CVE-2018-1889 2018-12-17 16h00 +00:00 IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152080.
5.4
Moyen
CVE-2018-1891 2018-12-17 16h00 +00:00 IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152082.
5.4
Moyen
CVE-2017-1268 2018-12-13 16h00 +00:00 IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 124743.
7.5
Haute
CVE-2018-1817 2018-12-13 16h00 +00:00 IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150021.
6.1
Moyen
CVE-2018-1818 2018-12-13 16h00 +00:00 IBM Security Guardium 10 and 10.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 150022.
9.8
Critique
CVE-2018-1498 2018-10-02 15h00 +00:00 IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223.
7.8
Haute
CVE-2018-1509 2018-10-02 15h00 +00:00 IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 141417.
7.4
Haute