IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the confidentiality, integrity, and availability of the affected system.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7288040 | Patch Vendor Advisory |
Configurations
History
06 Oct 2026, 14:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm
Ibm guardium Data Protection |
|
| CPE | cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:* | |
| References | () https://www.ibm.com/support/pages/node/7288040 - Patch, Vendor Advisory |
18 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-18 20:17
Updated : 2026-10-06 14:53
NVD link : CVE-2026-81656
Mitre link : CVE-2026-81656
CVE.ORG link : CVE-2026-81656
JSON object : View
Products Affected
ibm
- guardium_data_protection
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')