Guardium Data Protection (Ibm) - vulnerabilities (CVEs)

93 CVEs, 36 in the last 30 days, 14 known versions, newest CVE from 2026-10-20. Vendor: Ibm.

CVEs of Guardium Data Protection

CVE-2026-82891 - CVSS 8.1 (high), 2026-10-20: IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.
CVE-2026-75875 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.
CVE-2026-80381 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.
CVE-2026-82895 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-82900 - CVSS 9.1 (critical), 2026-10-08: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted…
CVE-2026-81932 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL…
CVE-2026-84032 - CVSS 8.1 (high), 2026-10-08: IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.
CVE-2026-84035 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-84057 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements…
CVE-2026-84058 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote…
CVE-2026-84198 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-84209 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special…
CVE-2026-84230 - CVSS 7.5 (high), 2026-10-08: IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent…
CVE-2026-84246 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-84247 - CVSS 8.1 (high), 2026-10-08: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
CVE-2026-84249 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for…
CVE-2026-84875 - CVSS 8.8 (high), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-84891 - CVSS 7.5 (high), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.
CVE-2026-87980 - CVSS 5.5 (medium), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive…
CVE-2026-82334 - CVSS 9.1 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could…
CVE-2026-82335 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a…
CVE-2026-82344 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An…
CVE-2026-84244 - CVSS 9.3 (critical), 2026-10-08: IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid.…
CVE-2026-84245 - CVSS 7.8 (high), 2026-10-08: IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this…
CVE-2026-84250 - CVSS 8.4 (high), 2026-10-08: IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local…
CVE-2026-84271 - CVSS 7.8 (high), 2026-10-08: IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this…
CVE-2026-84272 - CVSS 9.8 (critical), 2026-10-08: IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker…
CVE-2026-84274 - CVSS 6.5 (medium), 2026-10-08: IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive…
CVE-2026-84275 - CVSS 7.5 (high), 2026-10-08: IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this…
CVE-2026-84276 - CVSS 7.5 (high), 2026-10-08: IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network…
CVE-2026-84278 - CVSS 7.2 (high), 2026-10-08: IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated…
CVE-2026-84290 - CVSS 5.1 (medium), 2026-10-08: IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain…
CVE-2026-84422 - CVSS 7.2 (high), 2026-09-29: IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated…
CVE-2026-84436 - CVSS 9.1 (critical), 2026-09-29: IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user…
CVE-2026-84440 - CVSS 8.8 (high), 2026-09-29: IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence…
CVE-2026-84842 - CVSS 8.1 (high), 2026-09-29: IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote…
CVE-2026-84862 - CVSS 7.2 (high), 2026-09-25: IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this…
CVE-2026-84882 - CVSS 7.5 (high), 2026-09-25: IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker…
CVE-2026-84884 - CVSS 8.8 (high), 2026-09-25: IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who…
CVE-2026-84893 - CVSS 7.6 (high), 2026-09-25: IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access…
CVE-2026-85029 - CVSS 8.8 (high), 2026-09-25: IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to…
CVE-2026-85542 - CVSS 8.8 (high), 2026-09-25: IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can…
CVE-2026-4921 - CVSS 2.7 (low), 2026-09-23: IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in…
CVE-2026-84239 - CVSS 7.6 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special…
CVE-2026-84241 - CVSS 8.1 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization.
CVE-2026-84108 - CVSS 8.1 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84106 - CVSS 8.9 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web…
CVE-2026-84105 - CVSS 7.7 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special…
CVE-2026-84089 - CVSS 7.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
CVE-2026-84086 - CVSS 7.2 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a…
CVE-2026-84085 - CVSS 8.1 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an…
CVE-2026-84084 - CVSS 8.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability.
CVE-2026-84083 - CVSS 7.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local…
CVE-2026-84082 - CVSS 9.8 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in…
CVE-2026-84081 - CVSS 8.1 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation.
CVE-2026-84078 - CVSS 9.9 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access…
CVE-2026-84077 - CVSS 8.1 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability.
CVE-2026-84076 - CVSS 7.6 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.
CVE-2026-84075 - CVSS 9.9 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.
CVE-2026-84074 - CVSS 8.9 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web…
CVE-2026-84073 - CVSS 9.1 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special…
CVE-2026-84071 - CVSS 7.2 (high), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated…
CVE-2026-84070 - CVSS 8.9 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web…
CVE-2026-84036 - CVSS 7.4 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.
CVE-2026-84064 - CVSS 9.9 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special…
CVE-2026-84034 - CVSS 8.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged…
CVE-2026-84031 - CVSS 9 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web…
CVE-2026-82967 - CVSS 9.8 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls…
CVE-2026-82896 - CVSS 7.6 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability.
CVE-2026-82893 - CVSS 7.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
CVE-2026-82892 - CVSS 8.1 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS…
CVE-2026-82890 - CVSS 5.9 (medium), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input…
CVE-2026-82887 - CVSS 8.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements…
CVE-2026-82885 - CVSS 8.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in the REST API.
CVE-2026-82832 - CVSS 9.6 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web…
CVE-2026-82340 - CVSS 9.8 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change…
CVE-2026-81937 - CVSS 7.2 (high), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged…
CVE-2026-81933 - CVSS 8.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A low-privileged authenticated user can…
CVE-2026-81669 - CVSS 7.2 (high), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI…
CVE-2026-81657 - CVSS 9.8 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of…
CVE-2026-81656 - CVSS 8.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user…
CVE-2026-81626 - CVSS 8.6 (high), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL…
CVE-2026-81623 - CVSS 8.8 (high), 2026-09-18: IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper…
CVE-2026-80442 - CVSS 9.9 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality. Successful…
CVE-2026-80441 - CVSS 9.8 (critical), 2026-09-18: IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of…
CVE-2026-8405 - CVSS 6.5 (medium), 2026-05-27: IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" (LTR) can expose sensitive…
CVE-2026-4918 - CVSS 5.5 (medium), 2026-04-23: IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript…
CVE-2026-4917 - CVSS 4.9 (medium), 2026-04-23: IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL…
CVE-2026-4919 - CVSS 4.8 (medium), 2026-04-23: IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code…
CVE-2026-1274 - CVSS 4.9 (medium), 2026-04-23: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access management control panel.
CVE-2026-1272 - CVSS 4.3 (medium), 2026-04-23: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnerability in the user access control panel.
CVE-2025-36020 - CVSS 7.5 (high), 2025-08-06: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.
CVE-2025-3473 - CVSS 6.7 (medium), 2025-06-11: IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the…