5525 matches found
CVE-2026-84074 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84074 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84074
IBM Guardium Data Protection 12.2 is vulnerable to cross-site scripting (CWE-79) due to improper neutralization of input during web page generation. A remote authenticated attacker with low privileges can exploit this to execute arbitrary code, with changed scope (cross-origin impact) and high im...
EUVD-2026-83424
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84073 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84073 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84073
IBM Guardium Data Protection 12.2 is affected by a SQL injection flaw (CWE-89) that allows a remote authenticated attacker to execute arbitrary SQL commands through improper neutralization of special elements in an SQL command. The CVSS 3.1 score is 9.1 (CRITICAL) with a changed scope , indicatin...
EUVD-2026-83423
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84071 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...
CVE-2026-84071 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...
CVE-2026-84071
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can supply a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in arbit...
EUVD-2026-83421
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...
EUVD-2026-83420
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84070
IBM Guardium Data Protection 12.2 is vulnerable to arbitrary code execution caused by improper neutralization of input during web page generation. A remote authenticated attacker with low privileges and required user interaction can exploit this flaw, resulting in high impact on confidentiality a...
CVE-2026-84070 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84070 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
EUVD-2026-83419
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
CVE-2026-84036
IBM Guardium Data Protection 12.2 is vulnerable to improper authorization (CWE-285), allowing a remote authenticated attacker to bypass security restrictions. The vulnerability carries a CVSS 3.1 score of 7.4 (HIGH) with a changed scope, resulting in low impact to confidentiality, integrity, and ...
CVE-2026-84036 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
CVE-2026-84036 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...