Vulnerabilities

IBM Security Guardium 11.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

17CVEs

CVE-2023-35893

IBM Security Guardium command execution

Published 2023-08-16 · Modified

9.9EPSS 0.014

CVE-2023-47709

IBM Security Guardium command injection

Published 2024-05-11 · Analyzed

9.1EPSS 0.010

CVE-2023-30435

IBM Security Guardium cross-site scripting

Published 2023-08-27 · Modified

8.9EPSS 0.004

CVE-2022-43907

IBM Security Guardium command execution

Published 2023-08-27 · Modified

8.8EPSS 0.013

CVE-2023-42004

IBM Security Guardium CSV injection

Published 2023-11-28 · Modified

8.8EPSS 0.011

CVE-2023-47712

IBM Security Guardium privilege escalation

Published 2024-05-11 · Analyzed

7.8EPSS 0.002

CVE-2022-22307

IBM Security Guardium privilege escalation

Published 2023-06-15 · Modified

7.8EPSS 0.002

CVE-2023-33852

IBM Security Guardium SQL injection

Published 2023-08-27 · Modified

7.6EPSS 0.006

CVE-2022-43904

IBM Security Guardium information disclosure

Published 2023-08-27 · Modified

7.5EPSS 0.008

CVE-2022-43903

IBM Security Guardium denial of service

Published 2023-09-04 · Modified

6.5EPSS 0.007

CVE-2023-47711

IBM Security Guardium denial of service

Published 2024-05-11 · Analyzed

6.5EPSS 0.007

CVE-2021-39074

IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Published 2022-06-29 · Modified

6.1EPSS 0.006

CVE-2023-30436

IBM Security Guardium cross-site scripting

Published 2023-08-27 · Modified

5.5EPSS 0.003

CVE-2022-43909

IBM Security Guardium cross-site scripting

Published 2023-08-27 · Modified

5.4EPSS 0.004

CVE-2023-47710

IBM Security Guardium cross-site scripting