CVE-2021-39022

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-03-10 · updated 2026-06-17
Weakness: CWE-1236

Description

IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software. IBM X-Force ID: 213858.

Affected products

IBM Security Guardium Data Encryption: 4.0.0.0, 5.0.0.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/213858
https://www.ibm.com/support/pages/node/6562379
https://exchange.xforce.ibmcloud.com/vulnerabilities/213858
https://www.ibm.com/support/pages/node/6562379

Get alerted when CVE-2021-39022 or the next vulnerability affects your stack