CVE-2012-3340medium

CVE-2012-3340: medium-severity vulnerability in IBM InfoSphere Guardium

Published · Updated

Follow this CVE+ Monitor InfoSphere Guardium

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 1.1%
IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291.
CVSS:3.0/I:N/UI:N/AV:N/S:U/PR:L/C:L/A:N/AC:L/E:U/RC:C/RL:O
Affected products
IBM · InfoSphere Guardium
Related CVEs — IBM InfoSphere Guardium

In the same product, most dangerous first.

CVE-2012-3337MEDIUMCVE-2012-3337EPSS 2.0%CVE-2012-3338LOWCVE-2012-3338EPSS 1.1%CVE-2012-3336MEDIUMCVE-2012-3336EPSS 1.0%CVE-2012-3341MEDIUMCVE-2012-3341EPSS 0.7%