Security Guardium Big Data Intelligence
Vendor:
First CVE: Feb 26, 2018 · Active for 8 years
22
Total CVEs
More Total CVEs than 95% of tracked products
7.3
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Security Guardium Big Data Intelligence over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 26, 2018
8 years ago
Most Recent CVE
Oct 16, 2020
2,110 days ago
CVE Severity & Scoring
Security Guardium Big Data Intelligence22 CVEs
50%
36%
9%
All CVEs352,785 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local3 (13.6%)
Network19 (86.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low20 (90.9%)
High2 (9.1%)
Unknown0 (0.0%)
User Interaction
None20 (90.9%)
Unknown0 (0.0%)
Required2 (9.1%)
Privileges Required
Low6 (27.3%)
High0 (0.0%)
None16 (72.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (22 CVEs).
22 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-1373CRITICAL IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-For | Mar 2, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-1372CRITICAL IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user | Feb 27, 2018 | 9.8 | 29 | NO | NO |
CVE-2019-4340HIGH IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit th | Aug 20, 2019 | 8.2 | 26 | NO | NO |
CVE-2019-4314HIGH IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. IBM X-Force | Oct 29, 2019 | 7.5 | 25 | NO | NO |
CVE-2019-4310HIGH IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-For | Aug 20, 2019 | 7.5 | 25 | NO | NO |
CVE-2020-4254HIGH IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IB | Oct 16, 2020 | 7.5 | 24 | NO | NO |
CVE-2019-4338HIGH IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can | Aug 20, 2019 | 7.5 | 24 | NO | NO |
CVE-2018-1375HIGH IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerab | May 29, 2018 | 7.5 | 24 | NO | NO |
CVE-2019-4339HIGH IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IB | Oct 29, 2019 | 7.5 | 23 | NO | NO |
CVE-2019-4306MEDIUM IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the mod | Oct 29, 2019 | 6.5 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (22 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (22 CVEs).
Media Mentions
Signals from CVEs in this product scope (22 CVEs).
Top CNAs Publishing CVEs For Security Guardium Big Data Intelligence
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.0 | 11 | 6.3 | 1.2% | 0 | 0 |
| 3.1 | 10 | 6.6 | 1.4% | 0 | 0 |
| 1.0 | 1 | 7.5 | 0.8% | 0 | 0 |