Vulnerabilities

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component.

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

QRadar / WebSphere / Db2 / AIX / MQ / Maximo

CVSS

8.4

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-84250 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality.

   CVSS 7.5 CVE-2026-84275 IBM
2. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer.

   CVSS 7.8 CVE-2026-84271 IBM
3. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component.

   CVSS 7.8 CVE-2026-84245 IBM
4. 23
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search…

   CVSS 9.3 CVE-2026-84244 IBM