Security Vulnerabilities
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.
CVSS Score
7.2
EPSS Score
0.009
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
CVSS Score
7.7
EPSS Score
0.005
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVSS Score
8.9
EPSS Score
0.005
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVSS Score
8.1
EPSS Score
0.006
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
CVSS Score
7.6
EPSS Score
0.005
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.
CVSS Score
9.9
EPSS Score
0.006
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.
CVSS Score
7.6
EPSS Score
0.004
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability.
CVSS Score
8.1
EPSS Score
0.003
Published
2026-09-18
IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected system.
CVSS Score
9.9
EPSS Score
0.005
Published
2026-09-18