CVE-2025-3473

Summary: CVE-2025-3473 affects IBM Guardium Data Protection (11.5 and 12.1). A local privileged user can escalate to root due to insecure inherited permissions created by the program (CWE-277). The base CVSS v3.1 score is 6.7 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). IBM’s security bulletin confirms...

CVE-2026-81657

IBM Guardium Data Protection 12.2 is vulnerable to deserialization of untrusted data (CWE-502), allowing a remote unauthenticated attacker to execute arbitrary code on the system. The vulnerability is rated CRITICAL with a CVSS v3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). This CVE is ...

CVE-2026-84436

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection within the certificate export CLI functionality . A privileged authenticated CLI user can exploit this vulnerability to execute arbitrary commands with root privileges . This issue is caused by the improper neutralization of ...

CVE-2026-1274

IBM Guardium Data Protection 12.0, 12.1, and 12.2 are affected by CVE-2026-1274, a Bypass Business Logic vulnerability in the access management control panel (CWE-840). The IBM bulletin lists the affected versions and provides version-specific fixes via Fix Central bundles for 12.0, 12.1, and 12....

CVE-2026-82885

IBM Guardium Data Protection 12.2 is affected by a missing authorization flaw (CWE-862) in the REST API , allowing a remote authenticated attacker to gain elevated privileges. The flaw is scored CVSS 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning low-privilege remote acc...

CVE-2026-1272

CVE-2026-1272 affects IBM Guardium Data Protection 12.0, 12.1, and 12.2. Root cause is a Security Misconfiguration in the user access control panel (CWE-613: Insufficient Session Expiration). Impact description states no confidentiality, integrity, or availability changes beyond “LOW” for integri...

CVE-2026-4919

Technical details for CVE-2026-4919 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-36020

CVE-2025-36020 affects IBM Guardium Data Protection. According to the connected IBM bulletin, the issue enables information disclosure due to cleartext transmission of sensitive credential information. Affected versions are IBM Guardium Data Protection 11.5, 12.0, and 12.1. The bulletin recommend...

CVE-2026-84074

IBM Guardium Data Protection 12.2 is vulnerable to cross-site scripting (CWE-79) due to improper neutralization of input during web page generation. A remote authenticated attacker with low privileges can exploit this to execute arbitrary code, with changed scope (cross-origin impact) and high im...

CVE-2026-84077

IBM Guardium Data Protection 12.2 is affected by a cross-site request forgery (CSRF) vulnerability (CWE-352) that allows a remote attacker with no privileges to bypass security restrictions, provided the victim performs a user action. The CVSS 3.1 score is 8.1 (HIGH) , with impact on integrity an...

CVE-2026-84073

IBM Guardium Data Protection 12.2 is affected by a SQL injection flaw (CWE-89) that allows a remote authenticated attacker to execute arbitrary SQL commands through improper neutralization of special elements in an SQL command. The CVSS 3.1 score is 9.1 (CRITICAL) with a changed scope , indicatin...

CVE-2026-84078

IBM Guardium Data Protection 12.2 contains a missing authentication flaw (CWE-306) in the LoadBalancerServlet , rated CVSS 9.9 (CRITICAL) . An unauthenticated remote attacker can access privileged load-balancer operations, potentially performing unauthorized actions that impact the integrity and ...

CVE-2026-82340

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener . A remote network attacker who can reach TCP port 16017 may submit crafted serialized messages, potentially cau...

CVE-2026-84082

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements used in an SQL command. A remote unauthenticated attacker can exploit this to execute arbitrary SQL commands, with full impact on confidentiality, integrit...

CVE-2026-4918

Technical details for CVE-2026-4918 are not publicly available in the provided documents. No affected products, vectors, or fixes are specified. Monitor for updates as more information may be released.

CVE-2026-84064

IBM Guardium Data Protection 12.2 is vulnerable to SQL injection (CWE-89) caused by improper neutralization of special elements used in an SQL command. A remote authenticated attacker can execute arbitrary SQL commands, leading to high impact on confidentiality, integrity, and availability. The C...

CVE-2026-84440

IBM Guardium Data Protection 12.2 is vulnerable to command injection within its SNMP alert notification functionality. An authenticated attacker capable of influencing policy alert text can cause the SNMP alerter service to execute attacker-controlled data as operating system commands. Because th...

CVE-2026-4917

Technical details about CVE-2026-4917 are not publicly available in the provided documents. Monitor for updates as information is released.

CVE-2026-84089

IBM Guardium Data Protection 12.2 is vulnerable to improper privilege management (CWE-269), allowing a local attacker with low privileges to gain elevated privileges on the system. The vulnerability requires local access with low privilege level and low attack complexity, yielding a CVSS 3.1 scor...

CVE-2026-84278

IBM Security Guardium Data Protection version 12.2 is vulnerable to a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands via attacker-controlled arguments, leading to command execution with root privil...

CVE-2026-81656

IBM Guardium Data Protection 12.2 is affected by a SQL injection (CWE-89) in the New Query Builder REST Processor . A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially leading to unauthorized data access and impact to confidentialit...

CVE-2026-8405

The vulnerability CVE-2026-8405 affects IBM Guardium Data Protection (Guardium Data Protection add-on) with the Long Term Retention (LTR) feature, where sensitive credentials can be exposed in debug mode. Affected versions are 12.2.1 and 12.2.2; the issue is described as CWE-200 (Exposure of Sens...

CVE-2026-84422

IBM Guardium Data Protection 12.2 is vulnerable to an OS Command Injection (CWE-78) within the CLI certificate SMIME recipient deletion functionality. This flaw allows an authenticated privileged CLI user to execute arbitrary commands with root privileges . IBM has released a fix for version 12.2...

CVE-2026-80442

IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection in the exportCertificate functionality. A low-privilege attacker with network access can execute unauthorized commands, impacting confidentiality, integrity, and availability of the affected system. The CVSS ...

CVE-2026-81626

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) in the Load Balancer Groups component . An unauthenticated attacker can inject SQL statements through the Load Balancer Servlet endpoint over the network, requiring no user interaction or prior authentication....

CVE-2026-84075

IBM Guardium Data Protection 12.2 is affected by a missing authentication vulnerability in the ChangeTrackerServlet component, allowing a remote, unauthenticated attacker to bypass security restrictions . The vulnerability is rated CVSS 9.9 (Critical) with a changed scope and high integrity impac...

CVE-2026-84244

IBM Guardium Data Protection 12.2 is vulnerable to a stored cross-site scripting (XSS) vulnerability in the Quick Search results grid . This flaw allows an unauthenticated attacker capable of influencing monitored database traffic to execute malicious scripts in the browser of an authenticated Gu...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is affected by a hardcoded credentials vulnerability (CWE-798) in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially gaining unauthorized access to the internal database and compromi...

CVE-2026-84241

IBM Guardium Data Protection 12.2 is vulnerable to improper authorization , allowing a remote, unauthenticated attacker to bypass security restrictions. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, reflecting high impact across confidentialit...

CVE-2026-81933

IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the Analytic Grid Service Handler . A low-privileged authenticated user can inject SQL statements via the analytic cases grid endpoint, potentially leading to unauthorized access to sensitive data and impact to confidentiality, i...

CVE-2026-82967

IBM Guardium Data Protection 12.2 is affected by an authentication bypass vulnerability that allows an unauthenticated remote attacker to bypass IP-based access controls and gain access to the Guardium management interface. The flaw effectively nullifies the IP-restriction layer that would otherw...

CVE-2026-84031

IBM Guardium Data Protection 12.2 is vulnerable to a Cross-site Scripting (CWE-79) flaw caused by improper neutralization of input during web page generation. A remote authenticated attacker could exploit this to execute arbitrary code on the affected appliance, with changed scope impacting confi...

CVE-2026-84036

IBM Guardium Data Protection 12.2 is vulnerable to improper authorization (CWE-285), allowing a remote authenticated attacker to bypass security restrictions. The vulnerability carries a CVSS 3.1 score of 7.4 (HIGH) with a changed scope, resulting in low impact to confidentiality, integrity, and ...

CVE-2026-84239

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability caused by improper neutralization of special elements in an SQL command. A remote authenticated attacker with high privileges can exploit this to obtain sensitive information, with high confidentiality impact and low a...

CVE-2026-80441

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker can inject malicious SQL that is subsequently processed by the application, potentially compromising the confiden...

CVE-2026-82832

IBM Guardium Data Protection 12.2 is vulnerable to improper neutralization of input during web page generation , which could allow a remote authenticated attacker (low privileges required) to execute arbitrary code . The vulnerability carries a CVSS 3.1 score of 9.6 (CRITICAL) with a changed scop...

CVE-2026-84084

IBM Guardium Data Protection 12.2 is vulnerable to cross-site request forgery (CSRF) (CWE-352), allowing a remote unauthenticated attacker to bypass security restrictions when a user interacts with a crafted request. The CVSS 3.1 score is 8.8 (High) with impacts to confidentiality, integrity, and...

CVE-2026-84105

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements in an SQL command. A remote authenticated attacker can exploit this to obtain sensitive information across a security boundary (scope: changed), with a HIG...

CVE-2026-81623

IBM Guardium Data Protection version 12.2 is affected by a vulnerability that allows an authenticated user to execute arbitrary commands with low user privileges. The root cause is the improper validation of user supplied input , which facilitates OS command injection. No specific exploit informa...

CVE-2026-82896

IBM Guardium Data Protection 12.2 is affected by a path traversal vulnerability (CWE-22) that allows a remote authenticated attacker to traverse directories on the system. The vulnerability carries a CVSS 3.1 score of 7.6 (HIGH) with low confidentiality impact, high integrity impact, and low avai...

CVE-2026-84086

CVE-2026-84086 affects IBM Guardium Data Protection 12.2 and is a path traversal vulnerability (CWE-22) caused by improper limitation of a pathname to a restricted directory. A remote authenticated attacker with high privileges can exploit this to execute arbitrary code , resulting in high impact...

CVE-2026-84276

IBM Guardium Data Protection version 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller . An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion . This flaw ca...

CVE-2026-81669

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input , achieving command execution with root privileges . The CVSS 3.1 score is 7....

CVE-2026-81937

IBM Guardium Data Protection 12.2 contains a command injection vulnerability (CWE-78) in the import remotelog_config CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter , potentially achieving arbitrary command execution with root privilege...

CVE-2026-82892

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection caused by improper neutralization of special elements in an OS command, allowing a remote attacker to execute arbitrary commands. The flaw requires no prior authentication or user interaction but has a high attack complexity ...

CVE-2026-82893

IBM Guardium Data Protection 12.2 is affected by an improper privilege management flaw that allows a local attacker with low privileges to gain elevated privileges without user interaction. The vulnerability is scored CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availabilit...

CVE-2026-84106

IBM Guardium Data Protection 12.2 is affected by a vulnerability that could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation . The CVSS v3.1 score is 8.9 (HIGH) , with a changed scope and high impact on both confide...

CVE-2026-84245

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component due to improper privilege management (CWE-269). A low-privileged local user can exploit this flaw to gain root privileges , allowing for the unauthorized access or modification of sensitive...

CVE-2026-84070

IBM Guardium Data Protection 12.2 is vulnerable to arbitrary code execution caused by improper neutralization of input during web page generation. A remote authenticated attacker with low privileges and required user interaction can exploit this flaw, resulting in high impact on confidentiality a...

CVE-2026-84083

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. The root cause is insufficient argument validation in the SUID binary, allowing a local attacker with low-privileged access to execute arbitrary comman...