CyberzSOC

Publication detail
← Back to advisories & guidance

VA-25-136-01: IBM Security Guardium stored cross-site scripting ↗ source

May 16, 2025 CISA Vulnerability Advisory
Source: https://github.com/cisagov/CSAF/blob/develop/csaf_files/IT/white/2025/va-25-136-01.json

Summary

IBM Security Guardium 11.5 before patch 11.0p565 is vulnerable to stored cross-site scripting (XSS). An attacker with administrative privileges could store arbitrary content or script in the administrative web interface that would be rendered or executed by users visiting modified parts of the web interface. The attacker may be able or obtain session tokens which could be used to log in as a different user. CVE-2025-3440: IBM Security Guardium 11.5 before patch 11.0p565 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Tracked as IBM issue key GRD-97817 and PSIRT: PVR0631190.

Advisory Details CISA IT CSAF feed

Advisory ID
VA-25-136-01
Status
Final · version 1.1.0
Initial release
2025-05-16
Last revised
2025-06-16 (2 revisions)
Vendor
IBM
Critical infrastructure sectors
Information Technology
Deployed
Worldwide
Vendor headquarters
United States

Apply Guardium Data Protection patch 11.0p565 for Guardium version 11.5.

Affected products (1)
  • Security Guardium — 11.5
Revision history (2)
  • 2025-06-16 — v1.1.0: Add acknowledgment
  • 2025-05-16 — v1.0.0: Initial publication

From CISA's machine-readable CSAF 2.0 advisory (JSON).

Vulnerabilities as Stated by the Advisory

CVEWeaknessCVSS v3Details
CVE-2025-3440 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 3.5 Low IBM Security Guardium stored cross-site scripting
IBM Security Guardium 11.5 before patch 11.0p565 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Tracked as IBM issue key GRD-97817 and PSIRT: PVR0631190. CISA SSVC — Exploitation: None · Automatable: No · Impact: Partial

Vendor fix: Apply Guardium Data Protection patch 11.0p565 for Guardium version 11.5. ↗

Affected, fixed & timeline

Affected:

  • Security Guardium

Fixed in:

  • Security Guardium

Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2025-3440 5.5 Medium IBM Security Guardium IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript co…

Named by the advisory itself. Each CVE links to its tracked detail page.

Vendors Named in This Publication

No KEV-catalogued vendors are named in this publication.