Known vulnerabilities in Guardium Data Security Center (GDSC)

Vendor: IBM Corporation
Software: Guardium Data Security Center (GDSC)
Software CPE: cpe:2.3:a:ibm_corporation:guardium_data_security_center_gdsc:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 232
Public exploits: 27
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Guardium Data Security Center (GDSC) Guardium Data Security Center (GDSC) is affected by 232 known vulnerabilities: 26 high, 144 medium, 62 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124817 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-27148		 CWE-74 Medium
No
No
 3.8.8 02.04.2026 SB2026040224
SB2026040225
#VU124038 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-61730		 CWE-362 Low
No
No
 3.8.8 16.03.2026 SB2026031680
SB2026040225
SB2026041551
and 1 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 3.8.8 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 140 more
#VU124033 - Improper input validation
CVE-2025-61728		 CWE-20 Medium
No
No
 3.8.8 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 45 more
#VU123598 - Inefficient Regular Expression Complexity
CVE-2025-69873		 CWE-1333 Low
No
No
 3.8.8 06.03.2026 SB2026030610
SB2026030633
SB2026033162
and 6 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 3.8.8 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 112 more
#VU123128 - Incorrect Regular Expression
CVE-2026-25896		 CWE-185 Medium
Available
No
 3.8.8 23.02.2026 SB2026022328
SB2026031935
SB2026040116
and 5 more
#VU123126 - NULL Pointer Dereference
CVE-2026-26278		 CWE-476 Medium
Available
No
 3.8.8 23.02.2026 SB2026022326
SB2026031935
SB2026040225
and 4 more
#VU123116 - Uncontrolled Recursion
CVE-2026-0994		 CWE-674 Medium
No
No
 3.8.8 20.02.2026 SB2026022039
SB2026022040
SB2026022041
and 25 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639		 CWE-754 Medium
Available
No
 3.8.8 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 23 more
#VU122150 - Uncaught Exception
CVE-2026-25128		 CWE-248 Medium
Available
No
 3.8.8 30.01.2026 SB2026013034
SB2026030312
SB2026030633
and 7 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 3.8.8 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 65 more
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718		 CWE-1321 Medium
No
No
 3.8.8 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 25 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 3.8.8 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 36 more
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756		 CWE-78 Medium
No
No
 3.8.8 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU119236 - Improper Certificate Validation
CVE-2025-61727		 CWE-295 Low
No
No
 3.8.8 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 19 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 3.8.8 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 144 more
#VU118198 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-54798		 CWE-59 Low
No
No
 3.8.8 07.11.2025 SB2025110743
SB2025110755
SB2025112543
and 9 more
#VU114392 - Improper Handling of Unexpected Data Type
CVE-2025-7339		 CWE-241 Low
No
No
 3.8.8 22.08.2025 SB2025082222
SB2025091525
SB2025091621
and 18 more
#VU84474 - Reachable Assertion
CVE-2021-31294		 CWE-617 Medium
No
No
 3.8.8 15.12.2023 SB2023121802
SB2026030210
SB2026030633
and 2 more


Showing elements 1 - 20 out of 232