Known vulnerabilities in IBM Security Guardium 11.1 - page 2

Vendor: IBM Corporation
Software: IBM Security Guardium
Version: 11.1
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_guardium:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 54
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Security Guardium version 11.1 IBM Security Guardium 11.1 is affected by 54 vulnerabilities: 16 high, 22 medium, 16 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67566 - Authorization Bypass Through User-Controlled Key
CVE-2021-29773		 CWE-639 Medium
No
No
 - 22.09.2022 SB2022092210
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Public exploit available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Public exploit available
Exploited
 - 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU57493 - Improper input validation
CVE-2021-35561		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU52448 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-2161		 CWE-94 Medium
No
No
 - 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 45 more
#VU50745 - Improper input validation
CVE-2021-23840		 CWE-20 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Public exploit available
No
 - 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU49914 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-28374		 CWE-22 Medium
No
No
 - 13.01.2021 SB2021012124
SB2021012125
SB2021012126
and 48 more
#VU49370 - Deserialization of Untrusted Data
CVE-2020-36182		 CWE-502 High
No
No
 - 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU49374 - Deserialization of Untrusted Data
CVE-2020-36185		 CWE-502 High
No
No
 - 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU49150 - Use of Insufficiently Random Values
CVE-2020-25705		 CWE-330 Medium
Public exploit available
No
 - 17.11.2020 SB2020111734
SB2020122413
SB2021031802
and 24 more
#VU48143 - NULL Pointer Dereference
CVE-2020-25692		 CWE-476 Medium
No
No
 - 04.11.2020 SB2020110407
SB2020110408
SB2020121028
and 10 more
#VU47776 - Improper input validation
CVE-2020-14792		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 36 more
#VU47779 - Improper input validation
CVE-2020-14797		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU47780 - Improper input validation
CVE-2020-14779		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU47781 - Improper input validation
CVE-2020-14796		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 42 more
#VU47782 - Improper input validation
CVE-2020-14798		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102825
and 25 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 - 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more


Showing elements 21 - 40 out of 54