Known vulnerabilities in IBM Security Guardium Insights

Vendor: IBM Corporation
Software: IBM Security Guardium Insights
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_guardium_insights:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 24
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Guardium Insights IBM Security Guardium Insights is affected by 24 known vulnerabilities: 5 high, 15 medium, 4 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96731 - Improper Certificate Validation
CVE-2024-39689		 CWE-295 High
No
No
 3.4.1 03.09.2024 SB2024090358
SB2024090359
SB2024090440
and 49 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-5569		 CWE-835 Medium
No
No
 3.4.1 26.07.2024 SB2024072688
SB2024072690
SB2024072692
and 59 more
#VU67560 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-3538		 CWE-338 High
No
No
 3.0.1 22.09.2022 SB2022092202
#VU65728 - Improper control of a resource through its lifetime
CVE-2020-4172		 CWE-664 Low
No
No
 2.0.2 22.07.2022 SB2022072216
#VU65726 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-4169		 CWE-327 Medium
No
No
 2.0.2 22.07.2022 SB2022072216
#VU65724 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-4174		 CWE-327 Medium
No
No
 2.0.2 22.07.2022 SB2022072216
#VU65715 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4171		 CWE-200 Low
No
No
 2.0.2 22.07.2022 SB2022072216
#VU65713 - Improper Privilege Management
CVE-2020-4603		 CWE-269 Low
No
No
 2.0.2 22.07.2022 SB2022072216
#VU65712 - Improper Authentication
CVE-2020-4167		 CWE-287 Medium
No
No
 2.0.2 22.07.2022 SB2022072216
#VU63698 - Incorrect Regular Expression
CVE-2021-33502		 CWE-185 Medium
No
No
 3.0.1 26.05.2022 SB2021052416
SB2022052615
SB2022060618
and 17 more
#VU54394 - Incorrect Regular Expression
CVE-2020-28500		 CWE-185 Medium
No
No
 3.0 27.06.2021 SB2021062702
SB2021062703
SB2021090905
and 30 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 3.0 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 56 more
#VU52902 - Improper Validation of Array Index
CVE-2021-3121		 CWE-129 High
No
No
 3.0 06.05.2021 SB2021011120
SB2021050602
SB2021050603
and 34 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449		 CWE-476 Medium
Available
No
 3.0.1 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 3.0.1 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU50684 - Improper input validation
CVE-2020-13949		 CWE-20 Medium
No
No
 3.0 15.02.2021 SB2021021505
SB2021022701
SB2021030911
and 12 more
#VU49973 - Memory corruption
CVE-2021-3177		 CWE-119 High
No
No
 3.0 19.01.2021 SB2021012516
SB2021012517
SB2021022418
and 54 more
#VU49254 - Use After Free
CVE-2020-8265		 CWE-416 Medium
No
No
 3.0 04.01.2021 SB2021010419
SB2021010704
SB2021010705
and 33 more
#VU49253 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-8287		 CWE-444 Medium
Available
No
 3.0 04.01.2021 SB2021010419
SB2021010706
SB2021010707
and 33 more
#VU24240 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12399		 CWE-200 Low
No
No
 2.0.2 14.01.2020 SB2020011418
SB2020032709
SB2021012208
and 14 more


Showing elements 1 - 20 out of 24