Total
92 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-82890 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 5.9 MEDIUM |
| IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generation. | |||||
| CVE-2026-82887 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.8 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. | |||||
| CVE-2026-82885 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.8 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in the REST API. | |||||
| CVE-2026-84076 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 7.6 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. | |||||
| CVE-2026-84077 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability. | |||||
| CVE-2026-84078 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 9.9 CRITICAL |
| IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected system. | |||||
| CVE-2026-84081 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation. | |||||
| CVE-2026-84082 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 9.8 CRITICAL |
| IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. | |||||
| CVE-2026-84083 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 7.8 HIGH |
| IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands as root, resulting in full compromise of the Collector appliance. | |||||
| CVE-2026-84084 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.8 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability. | |||||
| CVE-2026-84085 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command. | |||||
| CVE-2026-84086 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 7.2 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory. | |||||
| CVE-2026-84089 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 7.8 HIGH |
| IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management. | |||||
| CVE-2026-84105 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 7.7 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command. | |||||
| CVE-2026-84106 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.9 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation. | |||||
| CVE-2026-84108 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation. | |||||
| CVE-2026-84239 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 7.6 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command. | |||||
| CVE-2026-84241 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.1 HIGH |
| IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization. | |||||
| CVE-2026-81656 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.8 HIGH |
| IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the confidentiality, integrity, and availability of the affected system. | |||||
| CVE-2026-81626 | 1 Ibm | 1 Guardium Data Protection | 2026-10-06 | N/A | 8.6 HIGH |
| IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the confidentiality, integrity, and availability of the affected system. | |||||