CVE-2021-39022

IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software. IBM X-Force ID: 213858.

• CWE-1236

• https://exchange.xforce.ibmcloud.com/vulnerabilities/213858VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6562379Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/213858VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6562379Patch, Vendor Advisory

Published

Mar 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39017IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6…6.5
• CVE-2021-39018IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6…4.3
• CVE-2021-39019IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6…6.5
• CVE-2021-3902An improper restriction of external entities (XXE) vulnerabi…9.8
• CVE-2021-39020IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores …5.3
• CVE-2021-39021IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves different…5.3
• CVE-2021-39023IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could all…7.5
• CVE-2021-39024IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vu…6.1
• CVE-2021-39025IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could…5.3
• CVE-2021-39026IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could…5.9
• CVE-2021-39027IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares …5
• CVE-2021-39028IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6…5.4