Security Vulnerabilities
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVSS Score
9.0
EPSS Score
0.006
Published
2026-09-18
IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise of sensitive system information.
CVSS Score
8.8
EPSS Score
0.004
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.
CVSS Score
7.4
EPSS Score
0.003
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
CVSS Score
9.9
EPSS Score
0.006
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVSS Score
8.9
EPSS Score
0.005
Published
2026-09-18
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in arbitrary command execution with root-level privileges.
CVSS Score
7.2
EPSS Score
0.015
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
CVSS Score
9.1
EPSS Score
0.004
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVSS Score
8.9
EPSS Score
0.005
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation.
CVSS Score
5.9
EPSS Score
0.003
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVSS Score
8.1
EPSS Score
0.006
Published
2026-09-18