rootpwn

high · CVSS v3 7.7

CVE-2026-84105

IBM Guardium Data Protection version 12.2 contains a SQL injection vulnerability that allows remote authenticated attackers to extract sensi

Overview

IBM Guardium Data Protection version 12.2 contains a SQL injection vulnerability that allows remote authenticated attackers to extract sensitive data. The issue stems from insufficient input sanitization before processing database commands within the application. This vulnerability is critical for database security teams because it exposes sensitive organizational data to unauthorized internal or compromised accounts.

Description

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.

Impact

This vulnerability impacts the Confidentiality of stored database records within the Guardium environment. An authenticated remote attacker can exploit the flaw to view sensitive information they are not authorized to access. Integrity and Availability are not directly impacted, though data theft remains a primary risk.

Remediation

Apply the official vendor-supplied patches or security updates provided by IBM for Guardium Data Protection 12.2. Review and restrict user roles and privileges to ensure the principle of least privilege is enforced for all authenticated accounts. Monitor database query logs for anomalous or unauthorized SQL statements originating from the application.

Risk context

The vulnerability is rated as High severity with a CVSS v3 score of 7.7, indicating a significant risk if exploited. While EPSS data is not currently available, the requirement for authentication means defenders should prioritize fixing this on systems accessible to untrusted or low-privilege users.

Affected products

  • IBM Guardium Data Protection 12.2

Scores

Severity
high
CVSS v2
6.8
CVSS v3
7.7
CVSS v4
—
EPSS
—

SQL Injection IBM Guardium Data Protection Information Disclosure High Severity Authenticated Attack

← All CVEs

Related CVEs

high

CVE-2026-93455

django-page-cms through version 2.0.13 contains an authorization bypass vulnerability in its admin helper views. The flaw allows low-privilege staff accounts to read unpublished drafts, page listings, and stored media paths without proper permission validation. This matters because it exposes sensitive organizational content to internal users who should not have access.

View analysis

high

CVE-2026-52727

The lxc-ci project inadvertently included a static pacman local-signing private key within Arch Linux container and virtual machine images built prior to May 28, 2026. This allows a malicious or compromised package mirror to issue cryptographically trusted packages to clients. Consequently, attackers can achieve arbitrary code execution as root on affected systems.

View analysis

high

CVE-2026-82892

IBM Guardium Data Protection 12.2 contains an OS command injection vulnerability. This flaw allows a remote attacker to execute arbitrary commands on the underlying system. It matters because successful exploitation could lead to full system compromise of sensitive database security monitoring infrastructure.

View analysis

high

CVE-2026-82893

IBM Guardium Data Protection 12.2 contains an improper privilege management vulnerability. This flaw allows a local user to escalate their privileges within the underlying operating environment. Addressing this issue is critical to maintaining strict access controls on database security appliances.

View analysis