Known vulnerabilities in IBM Security Guardium 11.2

Vendor: IBM Corporation
Software: IBM Security Guardium
Version: 11.2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_guardium:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 133
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Security Guardium version 11.2 IBM Security Guardium 11.2 is affected by 133 vulnerabilities: 19 high, 83 medium, 31 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89427 - Unrestricted Upload of File with Dangerous Type
CVE-2023-47711		 CWE-434 Low
No
No
 - 14.05.2024 SB2024051425
#VU89426 - Permissions, Privileges, and Access Controls
CVE-2023-47712		 CWE-264 Low
No
No
 - 14.05.2024 SB2024051425
#VU89425 - Command injection
CVE-2023-47709		 CWE-77 Medium
No
No
 - 14.05.2024 SB2024051425
#VU84037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-34062		 CWE-22 Medium
No
No
 - 11.12.2023 SB2023121107
SB2024013141
SB2024020233
and 6 more
#VU83580 - Improper input validation
CVE-2023-34054		 CWE-20 Medium
No
No
 - 29.11.2023 SB2023112965
SB2024013141
SB2024020233
and 6 more
#VU82943 - Permissions, Privileges, and Access Controls
CVE-2023-5870		 CWE-264 Low
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 54 more
#VU82942 - Integer overflow
CVE-2023-5869		 CWE-190 High
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 70 more
#VU82560 - Improper Access Control
CVE-2023-34059		 CWE-284 Low
No
No
 - 30.10.2023 SB2023103026
SB2023103031
SB2023103032
and 32 more
#VU82520 - Improper Authorization
CVE-2023-34058		 CWE-285 Medium
No
No
 - 27.10.2023 SB2023102702
SB2023103031
SB2023103032
and 33 more
#VU82380 - Out-of-bounds write
CVE-2023-5367		 CWE-787 Low
No
No
 - 25.10.2023 SB2023102548
SB2023102549
SB2023102558
and 46 more
#VU67029 - Error Handling
CVE-2021-41041		 CWE-388 Low
No
No
 - 06.09.2022 SB2022090642
SB2022090643
SB2022093005
and 25 more
#VU57346 - Use After Free
CVE-2016-4658		 CWE-416 High
No
No
 - 13.10.2021 SB2016092503
SB2021101345
SB2021102109
and 9 more
#VU56019 - Resource exhaustion
CVE-2021-30468		 CWE-400 Medium
No
No
 - 20.08.2021 SB2021082016
SB2021101933
SB2022042254
and 8 more
#VU51939 - Improper input validation
CVE-2021-22696		 CWE-20 Medium
No
No
 - 06.04.2021 SB2021040608
SB2021120219
SB2021120336
and 8 more
#VU47197 - Heap-based Buffer Overflow
CVE-2019-17006		 CWE-122 High
No
No
 - 30.09.2020 SB2019090221
SB2020093089
SB2020062437
and 19 more
#VU46019 - Cryptographic Issues
CVE-2020-6829		 CWE-310 Low
No
No
 - 25.08.2020 SB2020082520
SB2020072974
SB2020072975
and 18 more
#VU23369 - Use After Free
CVE-2019-11756		 CWE-416 High
No
No
 - 03.12.2019 SB2019120312
SB2019120314
SB2019121002
and 16 more
#VU33037 - Out-of-bounds read
CVE-2019-11719		 CWE-125 Medium
No
No
 - 23.07.2019 SB2019072322
SB2019082322
SB2019073024
and 17 more
#VU13523 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-8039		 CWE-300 Low
No
No
 - 28.06.2018 SB2018062910
SB2019021223
SB2020042115
and 11 more
#VU11285 - Data Handling
CVE-2017-12624		 CWE-19 Low
No
No
 - 27.03.2018 SB2017111431
SB2018072004
SB2018110715
and 5 more


Showing elements 1 - 20 out of 133