GCVE - cpe:2.3:a:ibm:infosphere_guardium:8.01:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:infosphere_guardium:8.01:*:*:*:*:*:*:*

part: a version: 8.01 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Infosphere Guardium (`a0afb46a-2663-57e1-8395-27e8750a61cb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-3338`	vulnerable	2026-06-08 05:02:09.262612	Details available LOW (3.7) IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286. Published: 2020-09-01T16:08:58.750Z Updated: 2024-09-16T17:17:41.842Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21611126 https://exchange.xforce.ibmcloud.com/vulnerabilities/78286	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3337`	vulnerable	2026-06-08 05:02:09.262196	Details available MEDIUM (5.3) IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to download arbitrary files on the system. IBM X-Force ID: 78284. Published: 2020-09-01T15:41:22.011Z Updated: 2024-09-17T01:26:46.111Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21611129 https://exchange.xforce.ibmcloud.com/vulnerabilities/78284	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3336`	vulnerable	2026-06-08 05:02:09.260308	Details available MEDIUM (6.3) IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282. Published: 2020-09-01T15:39:02.106Z Updated: 2024-09-16T18:24:47.049Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21611130 https://exchange.xforce.ibmcloud.com/vulnerabilities/78282	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3312`	vulnerable	2026-06-08 05:02:09.118094	Details available The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Published: 2012-08-29T22:00:00.000Z Updated: 2024-08-06T19:57:50.507Z Open on db.gcve.eu Reference links http://en.securitylab.ru/lab/PT-2012-15 https://exchange.xforce.ibmcloud.com/vulnerabilities/77785 http://www.ibm.com/support/docview.wss?uid=swg21609224 http://en.securitylab.ru/lab/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3309`	vulnerable	2026-06-08 05:02:09.106148	Details available Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts. Published: 2012-08-29T22:00:00.000Z Updated: 2024-08-06T19:57:50.577Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21609223 https://exchange.xforce.ibmcloud.com/vulnerabilities/77745 http://www.securitytracker.com/id?1027455 http://en.securitylab.ru/lab/PT-2012-15 http://en.securitylab.ru/lab/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.