IBM Security Guardium Big Data Intelligence 4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_guardium_big_data_intelligence:4.0:*:*:*:*:*:*:*
part: a version: 4.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Guardium Big Data Intelligence (f7428d3b-d485-54d1-927d-7335f6a0119e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-4340 |
vulnerable | 2026-06-08 05:13:57.084942 |
Details available
HIGH (7.1)
IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 161419.
Published: 2019-08-20T19:30:25.528Z
Updated: 2024-09-17T03:14:03.306Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4339 |
vulnerable | 2026-06-08 05:13:57.084609 |
Details available
MEDIUM (5.9)
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 161418.
Published: 2019-10-28T23:36:11.155Z
Updated: 2024-09-16T21:57:39.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4338 |
vulnerable | 2026-06-08 05:13:57.084164 |
Details available
HIGH (7.5)
IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417.
Published: 2019-08-20T19:30:25.480Z
Updated: 2024-09-16T20:53:00.540Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4330 |
vulnerable | 2026-06-08 05:13:57.079734 |
Details available
LOW (3.1)
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Force ID: 161210.
Published: 2019-10-28T23:36:10.730Z
Updated: 2024-09-16T20:37:40.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4329 |
vulnerable | 2026-06-08 05:13:57.079284 |
Details available
MEDIUM (4.3)
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209.
Published: 2019-10-28T23:36:10.249Z
Updated: 2024-09-16T19:47:09.207Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4314 |
vulnerable | 2026-06-08 05:13:57.070054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4311 |
vulnerable | 2026-06-08 05:13:57.069623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4310 |
vulnerable | 2026-06-08 05:13:57.069181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4309 |
vulnerable | 2026-06-08 05:13:57.068811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4307 |
vulnerable | 2026-06-08 05:13:57.064388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4306 |
vulnerable | 2026-06-08 05:13:57.063940 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.