3122 matches found
CVE-2026-84862 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbitrary code on the affected system...
CVE-2026-84882 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system...
CVE-2026-84882
IBM Guardium Data Protection 12.2 is vulnerable to a path traversal vulnerability in the Universal Connector Oracle Wallet upload component (CWE-22). An authenticated remote attacker could exploit this flaw to write arbitrary files to the system. IBM encourages customers to update their systems p...
EUVD-2026-87105
IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system...
CVE-2026-84882 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system...
CVE-2026-84884 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...
EUVD-2026-87104
IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...
CVE-2026-84884
IBM Guardium Data Protection 12.2 is affected by a vulnerability where internal REST service-account passwords are stored in a reversible plaintext-equivalent format . An authenticated attacker who successfully gains access to these stored credentials can recover the original password to obtain a...
CVE-2026-84884 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...
CVE-2026-84893 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database...
EUVD-2026-87103
IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database...
CVE-2026-84893
IBM Guardium Data Protection 12.2 is vulnerable to an SQL injection flaw located in the PESI service . This vulnerability allows an authenticated attacker to exploit the service to gain unauthorized access to sensitive information stored within the internal database. No specific exploit details o...
CVE-2026-84893 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database...
CVE-2026-85029
IBM Guardium Data Protection 12.2 is vulnerable to a path traversal vulnerability (CWE-22 ) due to improper limitation of a pathname to a restricted directory. A remote attacker could exploit this to obtain sensitive information, delete arbitrary files, or execute arbitrary code. IBM encourages c...
EUVD-2026-87100
IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory...
CVE-2026-85029 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory...
CVE-2026-85029 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory...
CVE-2026-85542
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability within the GIM bundle import functionality . An authenticated attacker can supply a maliciously crafted GIM bundle, causing the system to pass attacker-controlled arguments to the tar command . This flaw can lead t...
EUVD-2026-87097
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution...
CVE-2026-85542 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution...