IBM Security Guardium

Name: IBM Security Guardium
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

9critical41high54medium4low

updated 2026-10-28

vulnerabilities (118)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-8287US	medium6.5	16.3% (97th)	Exploit	no fix	2021-01-06	≤ Insights <3.0
CVE-2021-3177US	critical9.8	24.2% (98th)	—	no fix	2021-01-19	≤ Insights <3.0
CVE-2020-8265US	high8.1	9.12% (95th)	—	no fix	2021-01-06	≤ Insights <3.0
CVE-2019-4292US	high8.8	3.67% (90th)	—	no fix	2019-07-02	≤ 10.5
CVE-2020-4180US	high8.8	3.01% (87th)	—	no fix	2020-06-03	≤ 11.1
CVE-2021-20557US	high7.2	2.73% (86th)	—	no fix	2021-05-24	≤ 11.2
CVE-2020-4689US	medium6.8	2.35% (84th)	—	no fix	2020-10-12	≤ 11.2
CVE-2017-1253US	critical9.9	2.28% (83rd)	—	no fix	2017-07-05	4 versions
CVE-2021-20385US	high7.2	2.10% (82nd)	—	no fix	2021-05-24	≤ 11.2
CVE-2017-1597US	high7.5	2.02% (81st)	—	no fix	2018-12-17	7 versions
CVE-2020-4952US	high8.8	2.01% (81st)	—	no fix	2021-01-27	≤ 11.2
CVE-2017-1269US	critical9.8	1.85% (79th)	—	no fix	2017-07-05	4 versions
CVE-2019-4422US	high8.8	1.70% (77th)	—	no fix	2019-10-03	3 versions
CVE-2017-1272US	medium5.3	1.67% (77th)	—	no fix	2018-12-17	2 versions
CVE-2017-1267US	high7.5	1.63% (76th)	—	no fix	2017-07-21	4 versions
CVE-2017-1757US	high8.8	1.59% (76th)	—	no fix	2017-12-20	5 versions
CVE-2017-1254US	high7.1	1.59% (75th)	—	no fix	2017-07-05	4 versions
CVE-2017-1264US	high7.5	1.53% (75th)	—	no fix	2017-07-05	4 versions
CVE-2020-4921US	high8.8	1.52% (74th)	—	no fix	2021-01-20	2 versions
CVE-2020-4193US	critical9.8	1.44% (73rd)	—	no fix	2020-06-04	≤ 11.1
CVE-2023-35893US	high8.8	1.40% (72nd)	—	no fix	2023-08-16	≤ 10.6, 11.3, 11.4, 11.5
CVE-2017-1268US	high7.5	1.35% (71st)	—	no fix	2018-12-13	2 versions
CVE-2021-20427US	high7.5	1.34% (71st)	—	no fix	2021-08-11	≤ 11.2
CVE-2017-1262US	medium6.1	1.34% (71st)	—	no fix	2017-12-20	5 versions
CVE-2022-43907US	high8.8	1.32% (71st)	—	no fix	2023-08-27	≤ 11.4
CVE-2021-39072US	medium5.9OT elevated	1.28% (70th)	—	no fix	2022-04-19	≤ 11.3
CVE-2021-20428US	medium5.3	1.27% (70th)	—	no fix	2021-05-24	≤ 11.2
CVE-2020-4678US	medium4.9	1.24% (69th)	—	no fix	2020-10-12	≤ 11.2
CVE-2020-4690US	critical9.8OT elevated	1.15% (67th)	—	no fix	2021-09-23	≤ 11.3
CVE-2018-1501US	high7.5OT elevated	1.15% (67th)	—	no fix	2020-08-26	3 versions
CVE-2017-1258US	medium6.5	1.13% (66th)	—	no fix	2017-07-05	4 versions
CVE-2023-34062US	high7.5	1.12% (66th)	—	no fix	2023-11-15	4 versions
CVE-2020-4990US	high8.8	1.12% (66th)	—	no fix	2021-05-24	≤ 11.2
CVE-2020-4186US	medium5.3	1.07% (65th)	—	no fix	2020-07-30	3 versions
CVE-2020-4188US	medium5.3OT elevated	1.07% (65th)	—	no fix	2020-06-23	2 versions
CVE-2020-4187US	medium5.3	1.07% (65th)	—	no fix	2020-06-03	≤ 11.1
CVE-2023-42004US	high8.8	1.06% (64th)	—	no fix	2023-11-28	≤ 11.3, 11.4, 11.5
CVE-2017-1257US	medium4.3	1.06% (64th)	—	no fix	2017-12-20	5 versions
CVE-2023-47709US	high8.8	1.04% (64th)	—	no fix	2024-05-14	5 versions
CVE-2017-1255US	high7.5	1.04% (64th)	—	no fix	2018-05-02	6 versions
CVE-2020-4177US	critical9.8OT elevated	1.03% (64th)	—	no fix	2020-06-03	≤ 11.1
CVE-2018-1891US	medium5.4	0.97% (62nd)	—	no fix	2018-12-17	2 versions
CVE-2018-1889US	medium5.4	0.97% (62nd)	—	no fix	2018-12-17	2 versions
CVE-2021-20377US	low2.7	0.97% (62nd)	—	no fix	2021-09-23	≤ 11.3
CVE-2021-20426US	critical9.8OT elevated	0.96% (61st)	—	no fix	2021-05-24	≤ 11.2
CVE-2021-20418US	critical9.8	0.96% (61st)	—	no fix	2021-08-11	≤ 11.2
CVE-2021-20433US	medium6.5	0.95% (61st)	—	no fix	2021-09-15	≤ 11.3
CVE-2016-0238US	low3.7	0.94% (61st)	—	no fix	2017-07-05	6 versions
CVE-2023-34054US	high7.5	0.91% (60th)	—	no fix	2023-11-28	4 versions
CVE-2020-4688US	high7.8	0.91% (60th)	—	no fix	2021-01-20	2 versions

showing 50 of 118

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')20 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor12 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7 CVEs
CWE-319Cleartext Transmission of Sensitive Information5 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm5 CVEs
CWE-798Use of Hard-coded Credentials5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-20Improper Input Validation4 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)106 CVEs
DECERT-Bund (BSI CSAF)19 CVEs
USCISA CSAF IT advisories1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan