CVE-2026-82900 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-82900

IBM Guardium Data Protection versions 12.1 and 12.2.2 are vulnerable to a remote attack that allows for the deletion of arbitrary files . This issue is caused by the improper limitation of a pathname to a restricted directory (CWE-22). While the vulnerability poses a risk to data integrity and av...

CVE-2026-81932

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to SQL injection within the Sniffer component . A remote unauthenticated attacker can send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. IBM recommends applying the l...

CVE-2026-81932 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-84032 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation...

CVE-2026-84032 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation...

CVE-2026-84032

IBM Guardium Data Protection version 12.2.2 is vulnerable to a man-in-the-middle attack. The root cause is improper certificate validation (CWE-295), which could allow a remote attacker to intercept communications. To remediate this vulnerability, IBM encourages customers to update their systems ...

CVE-2026-84035 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-84035

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a stack-based buffer overflow in the Sniffer component . This vulnerability could allow a remote attacker to execute arbitrary code by overwriting adjacent memory when the program writes more data to a buffer on the stac...

CVE-2026-84035 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-84057 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84057 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84057

IBM Guardium Data Protection versions 12.1 and 12.2.2 are vulnerable to an OS command injection vulnerability (CWE-78 ) due to the improper neutralization of special elements used in an OS command. A remote attacker can exploit this flaw to execute arbitrary commands. The vulnerability affects th...

CVE-2026-84058

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a buffer overrun within the Sniffer component , specifically in the TDS (Microsoft SQL Server) PRELOGIN packet decoder . A remote attacker capable of sending a specially crafted TDS PRELOGIN packet to a network monitored...

CVE-2026-84058 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or...

CVE-2026-84198 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-84198

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a buffer overflow (CWE-120) within the Sniffer component . This vulnerability could allow a remote attacker to execute arbitrary code. To remediate this issue, IBM strongly recommends applying the latest Sniffer patch av...

CVE-2026-84209

IBM Guardium Data Protection versions 12.2.2 and 12.1 are vulnerable to a SQL injection flaw. The root cause is the improper neutralization of special elements used in an SQL command, resulting from a failure to properly sanitize input. This allows a remote attacker to execute arbitrary SQL comma...

CVE-2026-84209 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84230

IBM Guardium Data Protection version 12.2.2 is vulnerable to a denial of service (DoS) attack. The root cause is a race condition (CWE-362) triggered by concurrent unsynchronized writes to a shared map. A remote attacker can exploit this to cause the service to become unavailable. IBM has release...