Known vulnerabilities in IBM Security Guardium 10.1.2

Vendor: IBM Corporation
Software: IBM Security Guardium
Version: 10.1.2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_guardium:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Security Guardium version 10.1.2 IBM Security Guardium 10.1.2 is affected by 13 vulnerabilities: 13 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16600 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-1265		 CWE-300 Low
No
No
 - 18.12.2018 SB2018121819
#VU16599 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1597		 CWE-200 Low
No
No
 - 18.12.2018 SB2018121819
#VU16597 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1891		 CWE-79 Low
No
No
 - 18.12.2018 SB2018121819
#VU16596 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1889		 CWE-79 Low
No
No
 - 13.12.2018 SB2018121819
#VU16598 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1272		 CWE-200 Low
No
No
 - 11.12.2018 SB2018121819
#VU12581 - Weak Password Requirements
CVE-2017-1601		 CWE-521 Low
No
No
 - 11.05.2018 SB2018051117
#VU9691 - Stack-based buffer overflow
CVE-2017-9048		 CWE-121 Low
No
No
 10.0p400 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 5 more
#VU9689 - Buffer over-read
CVE-2017-9050		 CWE-126 Low
No
No
 10.0p400 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 4 more
#VU9688 - Buffer over-read
CVE-2017-9049		 CWE-126 Low
No
No
 10.0p400 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 4 more
#VU9687 - Memory corruption
CVE-2017-9047		 CWE-119 Low
No
No
 10.0p400 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 29 more
#VU7660 - Heap-based Buffer Overflow
CVE-2017-5337		 CWE-122 Low
No
No
 10.0p500 02.08.2017 SB2017011009
SB2017080109
SB2017021003
and 11 more
#VU7658 - Stack-based buffer overflow
CVE-2017-5336		 CWE-121 Low
No
No
 10.0p500 02.08.2017 SB2017011009
SB2017080109
SB2017021003
and 11 more
#VU7646 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-1267		 CWE-300 Low
No
No
 - 01.08.2017 SB2017071812