IBM Security Guardium Database Activity Monitor vulnerabilities

9 CVEs affecting IBM Security Guardium Database Activity Monitor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1601, published 2018-05-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0236, published 2016-10-21. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with…
CVE-2017-1601, published 2018-05-02. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to…
CVE-2016-0241, published 2016-10-22. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by…
CVE-2016-0239, published 2016-10-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allows remote authenticated users to make HTTP requests with administrator privileges…
CVE-2016-0240, published 2016-10-22. Low severity, CVSS 3.7. EPSS: 1% chance of exploitation in the next 30 days. IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 does not enable the HSTS protection mechanism, which makes it easier…
CVE-2016-0328, published 2016-10-22. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain administrator privileges for command…
CVE-2016-0235, published 2018-03-12. High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems. IBM…
CVE-2016-0237, published 2018-03-12. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached browser data. IBM X-Force ID: 110328.
CVE-2018-1368, published 2018-02-09. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Security Guardium Database Activity Monitor 9.0, 9.1, and 9.5 could allow a local user with low privileges to view report pages and perform some actions that only an admin should be performing,…