What’s Vulnerable › Vulnerabilities

CVE-2022-39166: IBM Security Guardium information disclosure

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-20 · updated 2026-06-17
• Weakness: CWE-200

Description

IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IBM X-Force ID: 235405.

Affected products

• IBM Security Guardium: 11.4

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/235405
• https://www.ibm.com/support/pages/node/6848317
• https://exchange.xforce.ibmcloud.com/vulnerabilities/235405
• https://www.ibm.com/support/pages/node/6848317

Get alerted when CVE-2022-39166 or the next vulnerability affects your stack