430 matches found
EUVD-2026-83307
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...
CVE-2026-81669
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input , achieving command execution with root privileges . The CVSS 3.1 score is 7....
CVE-2026-81669 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...
CVE-2026-81657
IBM Guardium Data Protection 12.2 is vulnerable to deserialization of untrusted data (CWE-502), allowing a remote unauthenticated attacker to execute arbitrary code on the system. The vulnerability is rated CRITICAL with a CVSS v3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). This CVE is ...
CVE-2026-81657 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...
CVE-2026-81657 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...
EUVD-2026-83306
IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...
CVE-2026-81656
IBM Guardium Data Protection 12.2 is affected by a SQL injection (CWE-89) in the New Query Builder REST Processor . A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially leading to unauthorized data access and impact to confidentialit...
CVE-2026-81656 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the...
CVE-2026-81656 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the...
EUVD-2026-83305
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the...
EUVD-2026-83304
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the...
CVE-2026-81626
IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) in the Load Balancer Groups component . An unauthenticated attacker can inject SQL statements through the Load Balancer Servlet endpoint over the network, requiring no user interaction or prior authentication....
CVE-2026-81626 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the...
CVE-2026-81626 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the...
EUVD-2026-83303
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input...
CVE-2026-81623 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input...
CVE-2026-81623 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input...
CVE-2026-81623
IBM Guardium Data Protection version 12.2 is affected by a vulnerability that allows an authenticated user to execute arbitrary commands with low user privileges. The root cause is the improper validation of user supplied input , which facilitates OS command injection. No specific exploit informa...
CVE-2026-80442
IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection in the exportCertificate functionality. A low-privilege attacker with network access can execute unauthorized commands, impacting confidentiality, integrity, and availability of the affected system. The CVSS ...