IBM Guardium Data Protection vulnerabilities, page 2
93 vulnerabilities
Known vulnerabilities in IBM Guardium Data Protection, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-84862ibmguardium data protection
EPSS score0.37%
IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbitrary code on the affected system.CVE-2026-84440ibmguardium data protectionEPSS score0.74%
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs with root privileges.CVE-2026-84842ibmguardium data protectionEPSS score0.39%
IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity.CVE-2026-84272ibmguardium data protectionEPSS score0.40%
IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.CVE-2026-84077ibmguardium data protectionEPSS score0.22%
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability.CVE-2026-84247ibmguardium data protectionEPSS score0.39%
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.CVE-2026-84250ibmguardium data protectionEPSS score0.09%
IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges.CVE-2026-84241ibmguardium data protectionEPSS score0.45%
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization.CVE-2026-84064ibmguardium data protectionEPSS score0.63%
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.CVE-2026-84036ibmguardium data protectionEPSS score0.32%
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.CVE-2026-84422ibmguardium data protectionEPSS score0.68%
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.CVE-2026-84081ibmguardium data protectionEPSS score0.29%
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation.CVE-2026-84058ibmguardium data protectionEPSS score0.37%
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.CVE-2026-84276ibmguardium data protectionEPSS score0.33%
IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the edge-controller process to terminate unexpectedly.CVE-2026-84086ibmguardium data protectionEPSS score0.87%
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.CVE-2026-84209ibmguardium data protectionEPSS score0.32%
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.CVE-2026-84249ibmguardium data protectionEPSS score0.41%
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.CVE-2026-84875ibmguardium data protectionEPSS score0.44%
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.CVE-2026-84278ibmguardium data protectionEPSS score2.25%
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges.CVE-2026-84436ibmguardium data protectionEPSS score0.68%
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges.