IBM Guardium Data Protection vulnerabilities
92 vulnerabilities
Known vulnerabilities in IBM Guardium Data Protection, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-82891ibmguardium data protectionIBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.CVE-2025-36020ibmguardium data protection
EPSS score0.21%
IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.CVE-2025-3473ibmguardium data protection+1EPSS score0.14%
IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program.CVE-2026-84884ibmguardium data protectionEPSS score0.24%
IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token.CVE-2026-84239ibmguardium data protectionEPSS score0.55%
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.CVE-2026-84057ibmguardium data protectionEPSS score0.39%
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.CVE-2026-84076ibmguardium data protectionEPSS score0.39%
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.CVE-2026-84082ibmguardium data protectionEPSS score0.67%
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.CVE-2026-84075ibmguardium data protectionEPSS score0.56%
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.CVE-2026-84074ibmguardium data protectionEPSS score0.53%
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.CVE-2026-84034ibmguardium data protectionEPSS score0.42%
IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise of sensitive system information.CVE-2026-84032ibmguardium data protectionEPSS score0.16%
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.CVE-2026-84105ibmguardium data protectionEPSS score0.47%
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.CVE-2026-84198ibmguardium data protectionEPSS score0.38%
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.CVE-2026-84245ibmguardium data protectionEPSS score0.09%
IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files.CVE-2026-84891ibmguardium data protectionEPSS score0.30%
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.CVE-2026-84893ibmguardium data protectionEPSS score0.18%
IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.CVE-2026-84084ibmguardium data protectionEPSS score0.24%
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability.CVE-2026-84290ibmguardium data protectionEPSS score0.11%
IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads.CVE-2026-84106ibmguardium data protectionEPSS score0.53%
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.