EUVD-2026-83435

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84082

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements used in an SQL command. A remote unauthenticated attacker can exploit this to execute arbitrary SQL commands, with full impact on confidentiality, integrit...

CVE-2026-84081

IBM Guardium Data Protection 12.2 is affected by a vulnerability caused by improper certificate validation , which could allow a remote attacker to bypass security restrictions. The attack requires no prior authentication or user interaction but carries high complexity , as indicated by the CVSS ...

EUVD-2026-83432

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation...

EUVD-2026-83431

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...

CVE-2026-84077

IBM Guardium Data Protection 12.2 is affected by a cross-site request forgery (CSRF) vulnerability (CWE-352) that allows a remote attacker with no privileges to bypass security restrictions, provided the victim performs a user action. The CVSS 3.1 score is 8.1 (HIGH) , with impact on integrity an...

EUVD-2026-83429

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability...

CVE-2026-84076

IBM Guardium Data Protection 12.2 is affected by an improper authorization flaw that could allow a remote authenticated attacker to bypass security restrictions . The vulnerability requires low privileges and is exploitable over the network without user interaction, resulting in high impact on in...

EUVD-2026-83428

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...

EUVD-2026-83426

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

CVE-2026-84075

IBM Guardium Data Protection 12.2 is affected by a missing authentication vulnerability in the ChangeTrackerServlet component, allowing a remote, unauthenticated attacker to bypass security restrictions . The vulnerability is rated CVSS 9.9 (Critical) with a changed scope and high integrity impac...

EUVD-2026-83424

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

CVE-2026-84074

IBM Guardium Data Protection 12.2 is vulnerable to cross-site scripting (CWE-79) due to improper neutralization of input during web page generation. A remote authenticated attacker with low privileges can exploit this to execute arbitrary code, with changed scope (cross-origin impact) and high im...

CVE-2026-84073

IBM Guardium Data Protection 12.2 is affected by a SQL injection flaw (CWE-89) that allows a remote authenticated attacker to execute arbitrary SQL commands through improper neutralization of special elements in an SQL command. The CVSS 3.1 score is 9.1 (CRITICAL) with a changed scope , indicatin...

EUVD-2026-83423

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

EUVD-2026-83421

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...

EUVD-2026-83420

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

CVE-2026-84070

IBM Guardium Data Protection 12.2 is vulnerable to arbitrary code execution caused by improper neutralization of input during web page generation. A remote authenticated attacker with low privileges and required user interaction can exploit this flaw, resulting in high impact on confidentiality a...

EUVD-2026-83419

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...

CVE-2026-84036

IBM Guardium Data Protection 12.2 is vulnerable to improper authorization (CWE-285), allowing a remote authenticated attacker to bypass security restrictions. The vulnerability carries a CVSS 3.1 score of 7.4 (HIGH) with a changed scope, resulting in low impact to confidentiality, integrity, and ...