IBM Security Guardium Database Activity Monitor vulnerabilities
6 known CVE vulnerabilities in IBM Security Guardium Database Activity Monitor, translated and rated.
- CVE-2016-6065High
The IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.
- CVE-2016-0328High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow local users to obtain administrator privileges for command execution via unspecified vectors.
- CVE-2016-0241High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP.
- CVE-2016-0239High
IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allow remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.
- CVE-2016-0236High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to execute arbitrary commands with root privileges via the search field.
- CVE-2016-0249High
CVE-2016-0249 describes an SQL injection vulnerability in IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100. It allows remote attackers to execute arbitrary SQL commands via unspecified vectors.