Security Bulletin: IBM Guardium Data Protection — Edge Cluster is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection — Edge Cluster has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-22869 DESCRIPTION: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchan...

CVE-2026-82830

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of argument delimiters...

CVE-2026-84228

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-84237

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-84030

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84229

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests...

CVE-2026-78537

IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm...

EUVD-2026-119733

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-84237

The IBM Guardium Data Protection version 12.2.4 is affected by a path traversal vulnerability (CVE-2026-84237 ) caused by an improper limitation of a pathname to a restricted directory (CWE-22). This flaw could allow a remote authenticated attacker to obtain sensitive information . IBM has addres...

CVE-2026-84237 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-84229

IBM Guardium Data Protection version 12.2.4 is vulnerable to a security restriction bypass due to improper validation of CSRF tokens for GET requests (CWE-352 ). A remote attacker can exploit this flaw to impact the integrity of the system. To remediate this vulnerability, IBM encourages customer...

EUVD-2026-119732

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests...

CVE-2026-84229 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests...

EUVD-2026-119731

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-84228

The software IBM Guardium Data Protection version 12.2.4 is affected by CVE-2026-84228 , where improper input validation (CWE-20) could allow a remote authenticated attacker to obtain sensitive information . The vulnerability has a CVSS 3.1 base score of 3.1 (Low). IBM provides a fix via an updat...

CVE-2026-84228 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-84030

IBM Guardium Data Protection version 12.2.4 is vulnerable to a SQL Injection vulnerability (CVE-2026-84030 ) caused by the improper neutralization of special elements used in an SQL command. A remote attacker could exploit this to execute arbitrary SQL commands . IBM has addressed this vulnerabil...

CVE-2026-84030 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

EUVD-2026-119730

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-82830 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of argument delimiters...