IBM Security Guardium Data Encryption vulnerabilities

CVEs per yearBy the year they were published

1. 202013
2. 20213
3. 20224

Newest CVEs

• CVE-2021-39025

  IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863.

  IBM · Security Guardium Data Encryption

  Medium5.3
• CVE-2021-39022

  IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or…

  IBM · Security Guardium Data Encryption

  Medium6.2
• CVE-2021-39026

  IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable…

  IBM · Security Guardium Data Encryption

  Medium5.9
• CVE-2021-39021

  IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an…

  IBM · Security Guardium Data Encryption

  Low3.7
• CVE-2019-4702

  IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or…

  IBM · Security Guardium Data Encryption

  Medium4.2
• CVE-2019-4687

  IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized…

  IBM · Security Guardium Data Encryption

  Low3.7
• CVE-2019-4160

  IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…

  IBM · Security Guardium Data Encryption

  Medium5.9
• CVE-2019-4695

  IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID:…

  IBM · Security Guardium Data Encryption

  Medium4.0
• CVE-2019-4713

  IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a…

  IBM · Security Guardium Data Encryption

  High8.8
• CVE-2019-4701

  IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936.

  IBM · Security Guardium Data Encryption

  Medium5.3