Vulnerability Details CVE-2026-84884
IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.5%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-84884
-
cpe:2.3:a:ibm:guardium_data_protection:12.1
-
cpe:2.3:a:ibm:guardium_data_protection:12.2