Security Vulnerabilities
IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
CVSS Score
5.6
EPSS Score
0.003
Published
2026-11-08
IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.
CVSS Score
3.1
EPSS Score
0.003
Published
2026-11-08
IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests.
CVSS Score
6.5
EPSS Score
0.002
Published
2026-11-08
IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of argument delimiters.
CVSS Score
6.7
EPSS Score
0.007
Published
2026-11-08
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.
CVSS Score
6.4
EPSS Score
0.003
Published
2026-11-08
IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVSS Score
3.1
EPSS Score
0.004
Published
2026-11-08
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
CVSS Score
5.0
EPSS Score
0.002
Published
2026-11-08
IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions.
CVSS Score
6.5
EPSS Score
0.005
Published
2026-11-08
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.29 could allow a local attacker to perform an arbitrary file write due to improper validation of pathnames during archive extraction.
CVSS Score
5.5
EPSS Score
0.002
Published
2026-11-08
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to broken access control.
CVSS Score
7.5
EPSS Score
0.005
Published
2026-11-08