CVE Catalog

CVE-2023-35893

CriticalCVSS 9.9
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.07%

61th percentile - higher than 61% of all known CVEs

Summary

IBM Security Guardium versions 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

Risk Assessment

An attacker could gain full control over the system, potentially leading to serious data breaches and operational disruptions for the organization.

Recommendation

It is recommended to update to the latest version of IBM Security Guardium and to monitor systems for potential attack attempts.

Original NVD description (English source)

IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 258824.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS