IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A low-privileged authenticated user can inject SQL statements through the analytic cases grid endpoint, potentially resulting in unauthorized access to sensitive data and impact to the confidentiality, integrity, and availability of the affected system.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7288040 | Patch Vendor Advisory |
Configurations
History
06 Oct 2026, 14:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:* | |
| First Time |
Ibm
Ibm guardium Data Protection |
|
| References | () https://www.ibm.com/support/pages/node/7288040 - Patch, Vendor Advisory |
18 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-18 20:17
Updated : 2026-10-06 14:04
NVD link : CVE-2026-81933
Mitre link : CVE-2026-81933
CVE.ORG link : CVE-2026-81933
JSON object : View
Products Affected
ibm
- guardium_data_protection
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')