Vulnerabilities

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of…

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

QRadar / WebSphere / Db2 / AIX / MQ / Maximo

CVSS

8.1

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-84209 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 5
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive…

   CVSS 3.1 CVE-2026-87980 IBM
2. 8
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.

   CVSS 5.9 CVE-2026-84891 IBM
3. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

   CVSS 7.5 CVE-2026-84875 IBM
4. 23
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication…

   CVSS 9.8 CVE-2026-84249 IBM
5. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

   CVSS 8.1 CVE-2026-84247 IBM
6. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

   CVSS 8.1 CVE-2026-84246 IBM
7. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent…

   CVSS 7.5 CVE-2026-84230 IBM
8. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

   CVSS 8.1 CVE-2026-84198 IBM
9. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special…

   CVSS 8.1 CVE-2026-84057 IBM
10. 15
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

    CVSS 8.1 CVE-2026-84035 IBM
11. 8
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.

    CVSS 5.6 CVE-2026-84032 IBM
12. 15
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a…

    CVSS 8.1 CVE-2026-82900 IBM
13. 15
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

    CVSS 8.1 CVE-2026-82895 IBM
14. 23
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.

    CVSS 9.8 CVE-2026-80381 IBM
15. 23
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.

    CVSS 9.8 CVE-2026-75875 IBM