CVE-2016-0240: IBM Security Guardium Database Activity Monitor

Low severity, CVSS 3.7. EPSS: 1% chance of exploitation in the next 30 days.

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP.

Affected products

• IBM Security Guardium Database Activity Monitor: version 8.2 only; version 9.0 only; version 9.1 only; version 9.5 only; version 10.0 only; version 10.1 only; …

Published 2016-10-22. Last modified 2026-06-17.