Ibm · Ibm Security Guardium · CVE-2025-3440
Name of the Vulnerable Software and Affected Versions:
IBM Security Guardium version 11.5
Description:
The issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session. This is due to a stored cross-site scripting issue.
Recommendations:
For IBM Security Guardium version 11.5, consider disabling the Web UI functionality until a patch is available to prevent potential exploitation of the stored cross-site scripting issue.