Security Vulnerabilities
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.
CVSS Score
7.4
EPSS Score
0.003
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
CVSS Score
9.9
EPSS Score
0.006
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVSS Score
8.9
EPSS Score
0.005
Published
2026-09-18
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in arbitrary command execution with root-level privileges.
CVSS Score
7.2
EPSS Score
0.015
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
CVSS Score
9.1
EPSS Score
0.004
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVSS Score
8.9
EPSS Score
0.005
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation.
CVSS Score
5.9
EPSS Score
0.003
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVSS Score
8.1
EPSS Score
0.006
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-09-18
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability.
CVSS Score
7.6
EPSS Score
0.005
Published
2026-09-18