CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0CVE-2017-1257
https://notcve.org/view.php?id=CVE-2017-1257
IBM Security Guardium 10.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 124684. IBM Security Guardium 10.0 divulga información sensible a usuarios sin autorización. Esta información puede emplearse para ejecutar más ataques en el sistema. • http://www.ibm.com/support/docview.wss?uid=swg22010431 http://www.securityfocus.com/bid/102308 https://exchange.xforce.ibmcloud.com/vulnerabilities/124684 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-1595
https://notcve.org/view.php?id=CVE-2017-1595
IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM X-Force ID: 132549. IBM Security Guardium 10.0 Database Activity Monitor podría permitir que un atacante local obtenga información altamente sensible mediante vectores sin especificar. IBM X-Force ID: 132549. • http://www.ibm.com/support/docview.wss?uid=swg22009629 https://exchange.xforce.ibmcloud.com/vulnerabilities/132549 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-1598
https://notcve.org/view.php?id=CVE-2017-1598
IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 132611. IBM Security Guardium 10.0 Database Activity Monitor emplea algoritmos criptográficos más débiles de lo esperado que podrían permitir que un atacante descifre información altamente sensible. IBM X-Force ID: 132611. • http://www.ibm.com/support/docview.wss?uid=swg22009621 https://exchange.xforce.ibmcloud.com/vulnerabilities/132611 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0CVE-2017-1600
https://notcve.org/view.php?id=CVE-2017-1600
IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132613. IBM Security Guardium 10.0 Database Activity Monitor es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. • http://www.ibm.com/support/docview.wss?uid=swg22009622 https://exchange.xforce.ibmcloud.com/vulnerabilities/132613 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 3.3EPSS: 0%CPEs: 5EXPL: 0CVE-2017-1261
https://notcve.org/view.php?id=CVE-2017-1261
IBM Security Guardium 10.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 124736. IBM Security Guardium 10.0 almacena información potencialmente sensible en archivos de registro que pueden ser leídos por un usuario local. IBM X-Force ID: 124736. • http://www.ibm.com/support/docview.wss?uid=swg22010437 https://exchange.xforce.ibmcloud.com/vulnerabilities/124736 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •