CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0CVE-2023-42004 – IBM Security Guardium CSV injection
https://notcve.org/view.php?id=CVE-2023-42004
28 Nov 2023 — IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper validation of csv file contents. IBM X-Force ID: 265262. IBM Security Guardium 11.3, 11.4 y 11.5 es potencialmente vulnerable a la inyección de CSV. Un atacante remoto podría ejecutar comandos maliciosos debido a una validación inadecuada del contenido del archivo csv. • https://exchange.xforce.ibmcloud.com/vulnerabilities/265262 • CWE-1236: Improper Neutralization of Formula Elements in a CSV File •
CVSS: 6.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-43903 – IBM Security Guardium denial of service
https://notcve.org/view.php?id=CVE-2022-43903
04 Sep 2023 — IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to improper input validation. IBM X-Force ID: 240894. IBM Security Guardium v10.6, v11.3 y v11.4 podría permitir a un usuario autenticado provocar una denegación de servicio debido a una validación de entrada incorrecta. IBM X-Force ID: 240894. • https://exchange.xforce.ibmcloud.com/vulnerabilities/240894 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-43904 – IBM Security Guardium information disclosure
https://notcve.org/view.php?id=CVE-2022-43904
27 Aug 2023 — IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM X-Force ID: 240895. IBM Security Guardium 11.3 y 11.4 podría revelar información confidencial a un atacante debido a la restricción inadecuada de intentos de autenticación excesivos. ID de IBM X-Force: 240895. • https://exchange.xforce.ibmcloud.com/vulnerabilities/240895 • CWE-307: Improper Restriction of Excessive Authentication Attempts •
CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0CVE-2023-30437 – IBM Security Guardium information disclosure
https://notcve.org/view.php?id=CVE-2023-30437
27 Aug 2023 — IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force ID: 252293. IBM Security Guardium 11.3, 11.4 y 11.5 podría permitir a un usuario no autorizado enumerar nombres de usuario enviando una solicitud HTTP especialmente manipulada. ID de IBM X-Force: 252293. • https://exchange.xforce.ibmcloud.com/vulnerabilities/252293 •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-30436 – IBM Security Guardium cross-site scripting
https://notcve.org/view.php?id=CVE-2023-30436
27 Aug 2023 — IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 252292. IBM Security Guardium 11.3, 11.4 y 11.5 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite a los usuarios incrustar código JavaScript arbitrario en la interfaz de usuario web, lo que altera l... • https://exchange.xforce.ibmcloud.com/vulnerabilities/252292 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.9EPSS: 0%CPEs: 3EXPL: 0CVE-2023-30435 – IBM Security Guardium cross-site scripting
https://notcve.org/view.php?id=CVE-2023-30435
27 Aug 2023 — IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 252291. IBM Security Guardium v11.3, v11.4 y v11.5 es vulnerable a Cross-Site Scripting (XSS) almacenado. Esta vulnerabilidad permite a los usuarios incrustar código JavaScript arbitrario en la interfaz de usuario... • https://exchange.xforce.ibmcloud.com/vulnerabilities/252291 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.9EPSS: 0%CPEs: 5EXPL: 0CVE-2023-35893 – IBM Security Guardium command execution
https://notcve.org/view.php?id=CVE-2023-35893
16 Aug 2023 — IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 258824. • https://exchange.xforce.ibmcloud.com/vulnerabilities/258824 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 8.4EPSS: 0%CPEs: 2EXPL: 0CVE-2022-43910 – IBM Security Guardium privilege escalation
https://notcve.org/view.php?id=CVE-2022-43910
19 Jul 2023 — IBM Security Guardium 11.3 could allow a local user to escalate their privileges due to improper permission controls. IBM X-Force ID: 240908. IBM Security Guardium v11.3 podría permitir a un usuario local escalar sus privilegios debido a controles de permisos inadecuados. ID de IBM X-Force: 240908. • https://exchange.xforce.ibmcloud.com/vulnerabilities/240908 • CWE-281: Improper Preservation of Permissions •
CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-43908 – IBM Security Guardium denial of service
https://notcve.org/view.php?id=CVE-2022-43908
19 Jul 2023 — IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validation. IBM X-Force ID: 240903. IBM Security Guardium v11.3 podría permitir a un usuario autenticado provocar una denegación de servicio debido a una incorrecta validación de entrada. ID de IBM X-Force: 240903. • https://exchange.xforce.ibmcloud.com/vulnerabilities/240903 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-22307 – IBM Security Guardium privilege escalation
https://notcve.org/view.php?id=CVE-2022-22307
15 Jun 2023 — IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753. IBM Security Guardium v11.3, v11.4 y v11.5 podría permitir a un usuario local obtener privilegios elevados debido a comprobaciones de autorización incorrectas. ID de IBM X-Force: 216753. • https://exchange.xforce.ibmcloud.com/vulnerabilities/216753 • CWE-863: Incorrect Authorization •