Known vulnerabilities in IBM Guardium Data Encryption (GDE)

Known vulnerabilities in IBM Guardium Data Encryption (GDE)

Vendor: IBM Corporation

Software: IBM Guardium Data Encryption (GDE)

Software CPE: cpe:2.3:a:ibm_corporation:ibm_gde:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 8

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU76256 - Improper Control of Generation of Code ('Code Injection') CVE-2023-26270	CWE-94	Medium	No	No	-	17.05.2023	SB2023051768
#VU76255 - Improper Control of Interaction Frequency CVE-2023-26271	CWE-799	Medium	No	No	-	17.05.2023	SB2023051768
#VU76254 - Externally-generated error message containing sensitive information CVE-2023-26272	CWE-211	Low	No	No	-	17.05.2023	SB2023051768
#VU65835 - Incorrect Regular Expression CVE-2022-31129	CWE-185	Medium	No	No	2.6.7	27.07.2022	SB2022072729 SB2022072901 SB2022081048 and 102 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24785	CWE-22	Medium	No	No	2.6.7	20.04.2022	SB2022042016 SB2022042017 SB2022060317 and 65 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	-	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046	CWE-94	High	Available	Exploited	-	15.12.2021	SB2021121504 SB2021121511 SB2021121512 and 178 more
#VU29032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-7676	CWE-79	Low	No	No	5.0.0.0	16.06.2020	SB2020061604 SB2021072628 SB2021072629 and 19 more