Vulnerabilities

IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication…

IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

QRadar / WebSphere / Db2 / AIX / MQ / Maximo

CVSS

9.8

EPSS

0.004 (p36)

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-84249 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 5
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive…

   CVSS 3.1 CVE-2026-87980 IBM
2. 8
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.

   CVSS 5.9 CVE-2026-84891 IBM
3. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

   CVSS 7.5 CVE-2026-84875 IBM
4. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

   CVSS 8.1 CVE-2026-84247 IBM
5. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

   CVSS 8.1 CVE-2026-84246 IBM
6. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent…

   CVSS 7.5 CVE-2026-84230 IBM
7. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of…

   CVSS 8.1 CVE-2026-84209 IBM
8. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

   CVSS 8.1 CVE-2026-84198 IBM
9. 15
   CVE NVD 23d ago

   IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special…

   CVSS 8.1 CVE-2026-84057 IBM
10. 15
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

    CVSS 8.1 CVE-2026-84035 IBM
11. 8
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.

    CVSS 5.6 CVE-2026-84032 IBM
12. 15
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a…

    CVSS 8.1 CVE-2026-82900 IBM
13. 15
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

    CVSS 8.1 CVE-2026-82895 IBM
14. 23
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.

    CVSS 9.8 CVE-2026-80381 IBM
15. 23
    CVE NVD 23d ago

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.

    CVSS 9.8 CVE-2026-75875 IBM