Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:guardium_data_encryption:5.0.0.0:*:*:*:*:*:*:*

part: a version: 5.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductGuardium Data Encryption (154a6f76-aa60-506b-a2dc-b988d801d75f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39027 vulnerable 2026-06-08 05:33:48.789088 Details available
LOW (3)
IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865.
Published: 2022-05-06T15:55:18.825Z
Updated: 2024-09-17T02:15:42.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39025 vulnerable 2026-06-08 05:33:48.788316 Details available
MEDIUM (5.3)
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863.
Published: 2022-03-10T19:50:25.674Z
Updated: 2024-09-17T00:10:40.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39024 vulnerable 2026-06-08 05:33:48.785970 Details available
MEDIUM (4.8)
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213862.
Published: 2022-05-10T15:45:18.595Z
Updated: 2024-09-17T03:23:34.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39022 vulnerable 2026-06-08 05:33:48.780786 Details available
MEDIUM (6.2)
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software. IBM X-Force ID: 213858.
Published: 2022-03-10T19:50:23.915Z
Updated: 2024-09-16T22:14:16.894Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.