Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.0

IBM Guardion Data Protection may let attackers run code

CVE-2026-84031 · published 10 days ago
Summary

Version 12.2 of IBM Guardium Data Protection can be tricked by a remote user who has login credentials into executing their own programs on the server. This could expose or corrupt sensitive data. Apply the latest security updates from IBM and limit access to trusted users only.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm guardium data protection 12.2
Original advisory text
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
References
Severity
9.0 Critical
CVSS 3.1: 9.0 (MITRE)
Exploitation
EPSS <1%
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published18 Sep 2026
Updated27 Sep 2026
First seen18 Sep 2026
Sources
CVE-2026-84031 · NVD
CVE-2026-84031 · MITRE
Track software like this
Free during beta