CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2018-1891
https://notcve.org/view.php?id=CVE-2018-1891
IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152082. IBM Security Guardium 10 y 10.5 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. • http://www.securityfocus.com/bid/106239 https://exchange.xforce.ibmcloud.com/vulnerabilities/152082 https://www.ibm.com/support/docview.wss?uid=ibm10742865 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-1597
https://notcve.org/view.php?id=CVE-2017-1597
IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132610. IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4 y 10.5 Database Activity Monitor no requiere que los usuarios tengan contraseñas fuertes por defecto, lo que facilita que los atacantes comprometan las cuentas de usuario. IBM X-Force ID: 132610. • http://www.securityfocus.com/bid/106236 https://exchange.xforce.ibmcloud.com/vulnerabilities/132610 https://www.ibm.com/support/docview.wss?uid=swg22014231 • CWE-521: Weak Password Requirements •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2017-1272
https://notcve.org/view.php?id=CVE-2017-1272
IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747. IBM Security Guardium 10.0 y 10.5 almacena información sensible en parámetros de URL. • http://www.securityfocus.com/bid/106237 https://exchange.xforce.ibmcloud.com/vulnerabilities/124747 https://www.ibm.com/support/docview.wss?uid=ibm10731655 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0CVE-2017-1265
https://notcve.org/view.php?id=CVE-2017-1265
IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) techniques. IBM X-Force ID: 124740. IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4 y 10.5 no valida, o lo hace incorrectamente, un certificado. Esta debilidad podría permitir que un atacante suplante una entidad de confianza mediante técnicas Man-in-the-Middle (MitM). • http://www.securityfocus.com/bid/106234 https://exchange.xforce.ibmcloud.com/vulnerabilities/124740 https://www.ibm.com/support/docview.wss?uid=swg22014229 • CWE-295: Improper Certificate Validation •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-1268
https://notcve.org/view.php?id=CVE-2017-1268
IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 124743. IBM Security Guardium 10 y 10.5 emplea un hash criptográfico en un sentido contra una entrada que no debería ser reversible, como una contraseña, pero el software tampoco emplea una sal como parte de la entrada. IBM X-Force ID: 124743. • http://www.securityfocus.com/bid/106339 https://exchange.xforce.ibmcloud.com/vulnerabilities/124743 https://www.ibm.com/support/docview.wss?uid=ibm10737077 • CWE-310: Cryptographic Issues •