CVE-2025-3473

Summary: CVE-2025-3473 affects IBM Guardium Data Protection (11.5 and 12.1). A local privileged user can escalate to root due to insecure inherited permissions created by the program (CWE-277). The base CVSS v3.1 score is 6.7 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). IBM’s security bulletin confirms...

CVE-2026-4919

Technical details for CVE-2026-4919 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-36020

CVE-2025-36020 affects IBM Guardium Data Protection. According to the connected IBM bulletin, the issue enables information disclosure due to cleartext transmission of sensitive credential information. Affected versions are IBM Guardium Data Protection 11.5, 12.0, and 12.1. The bulletin recommend...

CVE-2026-1274

IBM Guardium Data Protection 12.0, 12.1, and 12.2 are affected by CVE-2026-1274, a Bypass Business Logic vulnerability in the access management control panel (CWE-840). The IBM bulletin lists the affected versions and provides version-specific fixes via Fix Central bundles for 12.0, 12.1, and 12....

CVE-2026-1272

CVE-2026-1272 affects IBM Guardium Data Protection 12.0, 12.1, and 12.2. Root cause is a Security Misconfiguration in the user access control panel (CWE-613: Insufficient Session Expiration). Impact description states no confidentiality, integrity, or availability changes beyond “LOW” for integri...

CVE-2026-4918

Technical details for CVE-2026-4918 are not publicly available in the provided documents. No affected products, vectors, or fixes are specified. Monitor for updates as more information may be released.

CVE-2026-4917

Technical details about CVE-2026-4917 are not publicly available in the provided documents. Monitor for updates as information is released.

CVE-2026-8405

The vulnerability CVE-2026-8405 affects IBM Guardium Data Protection (Guardium Data Protection add-on) with the Long Term Retention (LTR) feature, where sensitive credentials can be exposed in debug mode. Affected versions are 12.2.1 and 12.2.2; the issue is described as CWE-200 (Exposure of Sens...