by Kastro
Paper/Archive/CVE-2026-84209

CVE-2026-84209

IBM Guardium Data Protection — IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 25.7.257 × 205.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

Affected

ProductAffectedFixed inSource
Guardium Data Protection12.2.2–CNA
Guardium Data Protection12.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ibm (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchibm.com/support/pages/node/7288832