https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-25029.htmlhttps://patchthecve.com/cve/CVE-2025-25029.htmlWed, 17 Jun 2026 09:00:09 +0000MEDIUM 4.9: IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.https://patchthecve.com/cve/CVE-2025-25026.htmlhttps://patchthecve.com/cve/CVE-2025-25026.htmlWed, 17 Jun 2026 09:00:09 +0000MEDIUM 4.3: IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.https://patchthecve.com/cve/CVE-2025-25025.htmlhttps://patchthecve.com/cve/CVE-2025-25025.htmlWed, 17 Jun 2026 09:00:09 +0000MEDIUM 4.3: IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.https://patchthecve.com/cve/CVE-2025-3440.htmlhttps://patchthecve.com/cve/CVE-2025-3440.htmlWed, 17 Jun 2026 09:19:57 +0000MEDIUM 5.5: IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.https://patchthecve.com/cve/CVE-2025-25023.htmlhttps://patchthecve.com/cve/CVE-2025-25023.htmlWed, 17 Jun 2026 09:00:09 +0000MEDIUM 4.9: IBM Security Guardium 11.4 and 12.1 could allow a privileged user to read any file on the system due to incorrect privilege assignment.https://patchthecve.com/cve/CVE-2024-49336.htmlhttps://patchthecve.com/cve/CVE-2024-49336.htmlWed, 17 Jun 2026 07:59:43 +0000MEDIUM 6.5: IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.https://patchthecve.com/cve/CVE-2023-47710.htmlhttps://patchthecve.com/cve/CVE-2023-47710.htmlWed, 17 Jun 2026 06:33:10 +0000MEDIUM 5.4: IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 271525https://patchthecve.com/cve/CVE-2023-47717.htmlhttps://patchthecve.com/cve/CVE-2023-47717.htmlWed, 17 Jun 2026 06:33:11 +0000MEDIUM 4.4: IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690.https://patchthecve.com/cve/CVE-2023-47712.htmlhttps://patchthecve.com/cve/CVE-2023-47712.htmlWed, 17 Jun 2026 06:33:10 +0000HIGH 7.8: IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a local user to gain elevated privileges on the system due to improper permissions control. IBM X-Force ID: 271527.https://patchthecve.com/cve/CVE-2023-47711.htmlhttps://patchthecve.com/cve/CVE-2023-47711.htmlWed, 17 Jun 2026 06:33:10 +0000LOW 2.7: IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow an authenticated user to upload files that would cause a denial of service. IBM X-Force ID: 271526.https://patchthecve.com/cve/CVE-2023-47709.htmlhttps://patchthecve.com/cve/CVE-2023-47709.htmlWed, 17 Jun 2026 06:33:10 +0000CRITICAL 9.1: IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 271524.