Known vulnerabilities in IBM Security Guardium 11.0 - page 2

Vendor: IBM Corporation
Software: IBM Security Guardium
Version: 11.0
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_guardium:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 52
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Security Guardium version 11.0 IBM Security Guardium 11.0 is affected by 52 vulnerabilities: 16 high, 22 medium, 14 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67566 - Authorization Bypass Through User-Controlled Key
CVE-2021-29773		 CWE-639 Medium
No
No
 - 22.09.2022 SB2022092210
#VU59727 - Improper input validation
CVE-2022-21299		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 105 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Public exploit available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Public exploit available
Exploited
 - 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU52448 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-2161		 CWE-94 Medium
No
No
 - 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 45 more
#VU50745 - Improper input validation
CVE-2021-23840		 CWE-20 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Public exploit available
No
 - 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU49967 - Deserialization of Untrusted Data
CVE-2021-20190		 CWE-502 High
No
No
 - 19.01.2021 SB2021012514
SB2021042826
SB2021050708
and 17 more
#VU49914 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-28374		 CWE-22 Medium
No
No
 - 13.01.2021 SB2021012124
SB2021012125
SB2021012126
and 48 more
#VU49370 - Deserialization of Untrusted Data
CVE-2020-36182		 CWE-502 High
No
No
 - 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU49374 - Deserialization of Untrusted Data
CVE-2020-36185		 CWE-502 High
No
No
 - 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU49150 - Use of Insufficiently Random Values
CVE-2020-25705		 CWE-330 Medium
Public exploit available
No
 - 17.11.2020 SB2020111734
SB2020122413
SB2021031802
and 24 more
#VU48143 - NULL Pointer Dereference
CVE-2020-25692		 CWE-476 Medium
No
No
 - 04.11.2020 SB2020110407
SB2020110408
SB2020121028
and 10 more
#VU47776 - Improper input validation
CVE-2020-14792		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 36 more
#VU47779 - Improper input validation
CVE-2020-14797		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU47780 - Improper input validation
CVE-2020-14779		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU47781 - Improper input validation
CVE-2020-14796		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 42 more
#VU47782 - Improper input validation
CVE-2020-14798		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102825
and 25 more


Showing elements 21 - 40 out of 52