IBM InfoSphere Guardium vulnerabilities
9 CVEs affecting IBM InfoSphere Guardium, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3341, published 2020-09-01.
More from IBM.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2012-3312, published 2012-08-29. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to…
- CVE-2012-3337, published 2020-09-01. Medium severity, CVSS 5.3. EPSS: 2% chance of exploitation in the next 30 days. IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot"…
- CVE-2012-3338, published 2020-09-01. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker…
- CVE-2012-3340, published 2020-09-01. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this…
- CVE-2012-3336, published 2020-09-01. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the…
- CVE-2012-3341, published 2020-09-01. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a…
- CVE-2012-3309, published 2012-08-29. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote…
- CVE-2013-0490, published 2013-02-27. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM InfoSphere Guardium S-TAP 8.1 for DB2 on z/OS allows local users to gain privileges via unknown vectors.
- CVE-2012-2204, published 2020-02-10. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. InfoSphere Guardium aix_ktap module: DoS