PT-2026-95686

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A cross-site request forgery CSRF issue exists, which could allow a remote attacker to bypass security restrictions. CSRF is a type of attack that tricks a victim into submitting a maliciou...

PT-2026-95684

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of special elements used in an SQL command allows a remote attacker to execute arbitrary SQL commands. This issue is a form of SQL injection, where an attacker can...

PT-2026-95672

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A hardcoded credentials issue exists within the hardware assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, which may lead to...

PT-2026-95677

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

PT-2026-95678

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

PT-2026-95674

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

PT-2026-95675

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

PT-2026-95628

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description The Analytic Grid Service Handler contains a SQL injection flaw. A low-privileged authenticated user can inject SQL statements through the analytic cases grid endpoint, which may lead to...

PT-2026-95671

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

PT-2026-95631

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of input during web page generation. Recommendations Apply the available patch for version 12.2...

PT-2026-95679

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

PT-2026-95682

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...

PT-2026-95627

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated privileged CLI user can execute arbitrary shell commands with root privileges. This occurs due to a command injection flaw in the create csr wildcard CLI command via the...

PT-2026-95632

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A missing authorization check in the REST API allows a remote authenticated attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer versio...

PT-2026-95685

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Insufficient argument validation in the SUID-root nmap wrapper binary on the Collector appliance allows a local attacker with low-privileged access to execute arbitrary commands as root. Th...

PT-2026-95626

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A remote unauthenticated attacker can execute arbitrary code on the system. This occurs due to the deserialization of untrusted data, which allows a network attacker who can reach the...

PT-2026-95670

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authentication bypass exists that allows an unauthenticated remote attacker to circumvent IP-based access controls and gain access to the Guardium management interface. Recommendations A...

PT-2026-95622

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated OS command injection flaw exists in the exportCertificate functionality. This issue allows an attacker to execute unauthorized commands on the system, potentially...

PT-2026-95623

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper validation of user supplied input allows an authenticated user to execute arbitrary commands with low user privileges on the system. Recommendations At the moment, there is no...

PT-2026-95693

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A remote authenticated attacker can obtain sensitive information due to improper neutralization of special elements used in an SQL command, which leads to an SQL injection. SQL injection is...