PT-2026-95625

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An issue exists in the New Query Builder REST Processor where a low-privileged authenticated user can perform a SQL injection. This occurs via the 'newQueryBuilder' REST endpoint, allowing...

CVE-2026-81656: Improper Neutralization of Special Elements used in an SQL Command

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the...