CVE-2026-82887

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection due to improper neutralization of special elements used in an OS command. A remote authenticated attacker (low privileges required) can execute arbitrary commands, leading to high impact on confidentiality, integrity, and ava...

CVE-2026-82885

IBM Guardium Data Protection 12.2 is affected by a missing authorization flaw (CWE-862) in the REST API , allowing a remote authenticated attacker to gain elevated privileges. The flaw is scored CVSS 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning low-privilege remote acc...

EUVD-2026-83312

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in the REST API...

CVE-2026-82832 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

CVE-2026-82832

IBM Guardium Data Protection 12.2 is vulnerable to improper neutralization of input during web page generation , which could allow a remote authenticated attacker (low privileges required) to execute arbitrary code . The vulnerability carries a CVSS 3.1 score of 9.6 (CRITICAL) with a changed scop...

EUVD-2026-83311

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

EUVD-2026-83310

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System CAS listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause...

CVE-2026-82340

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener . A remote network attacker who can reach TCP port 16017 may submit crafted serialized messages, potentially cau...

CVE-2026-82340 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System CAS listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause...

EUVD-2026-83309

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelogconfig file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root...

CVE-2026-81937

IBM Guardium Data Protection 12.2 contains a command injection vulnerability (CWE-78) in the import remotelog_config CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter , potentially achieving arbitrary command execution with root privilege...

CVE-2026-81933

IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the Analytic Grid Service Handler . A low-privileged authenticated user can inject SQL statements via the analytic cases grid endpoint, potentially leading to unauthorized access to sensitive data and impact to confidentiality, i...

EUVD-2026-83307

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

CVE-2026-81669

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input , achieving command execution with root privileges . The CVSS 3.1 score is 7....

CVE-2026-81669 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

CVE-2026-81657

IBM Guardium Data Protection 12.2 is vulnerable to deserialization of untrusted data (CWE-502), allowing a remote unauthenticated attacker to execute arbitrary code on the system. The vulnerability is rated CRITICAL with a CVSS v3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). This CVE is ...

EUVD-2026-83306

IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-81656

IBM Guardium Data Protection 12.2 is affected by a SQL injection (CWE-89) in the New Query Builder REST Processor . A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially leading to unauthorized data access and impact to confidentialit...

CVE-2026-81656 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the...

CVE-2026-81626

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) in the Load Balancer Groups component . An unauthenticated attacker can inject SQL statements through the Load Balancer Servlet endpoint over the network, requiring no user interaction or prior authentication....