Ibm

Guardium Data Protection

92 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.6

CVE-2026-81626

  • EPSS 0.27%
  • Veröffentlicht 18.09.2026 19:26:37
  • Zuletzt bearbeitet 06.10.2026 14:50:48

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorize...

8.8

CVE-2026-81623

  • EPSS 0.26%
  • Veröffentlicht 18.09.2026 19:25:56
  • Zuletzt bearbeitet 06.10.2026 14:50:23

IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input.

8.8

CVE-2026-80442

  • EPSS 0.63%
  • Veröffentlicht 18.09.2026 19:25:33
  • Zuletzt bearbeitet 06.10.2026 14:39:04

IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality. Successful exploitation could allow an attacker to execute unauthorized commands and impact the confidentia...

9.8

CVE-2026-80441

  • EPSS 0.38%
  • Veröffentlicht 18.09.2026 19:24:58
  • Zuletzt bearbeitet 06.10.2026 14:32:54

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently proc...

6.5

CVE-2026-8405

  • EPSS 0.23%
  • Veröffentlicht 27.05.2026 13:20:52
  • Zuletzt bearbeitet 03.06.2026 01:13:49

IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" (LTR) can expose sensitive credentials in debug mode.

4.3

CVE-2026-1272

  • EPSS 0.2%
  • Veröffentlicht 22.04.2026 23:33:45
  • Zuletzt bearbeitet 27.04.2026 18:23:48

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnerability in the user access control panel.

4.9

CVE-2026-1274

  • EPSS 0.3%
  • Veröffentlicht 22.04.2026 23:30:59
  • Zuletzt bearbeitet 27.04.2026 18:23:14

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access management control panel.

4.9

CVE-2026-4917

  • EPSS 0.36%
  • Veröffentlicht 22.04.2026 23:27:45
  • Zuletzt bearbeitet 27.04.2026 18:13:46

IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.

4.8

CVE-2026-4918

  • EPSS 0.14%
  • Veröffentlicht 22.04.2026 23:26:38
  • Zuletzt bearbeitet 27.04.2026 18:13:02

IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credenti...

4.8

CVE-2026-4919

  • EPSS 0.19%
  • Veröffentlicht 22.04.2026 23:23:34
  • Zuletzt bearbeitet 27.04.2026 18:11:52

IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials dis...