by Kastro
Paper/Archive/CVE-2026-84244

CVE-2026-84244

IBM Guardium Data Protection — IBM Guardium Data Protection Cross-Site Scripting

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
29
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 7.0.070 × 201.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user.

Affected

ProductAffectedFixed inSource
Guardium Data Protection12.2–CNA

Scores by source

ibm (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

patchibm.com/support/pages/node/7288035