CVE-2026-82832: IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
Other sources
IBM Guardium Data Protection could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Fixed in 12.2Patch SqlGuard_12.0p233_FixPack
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker must be authenticated to exploit the vulnerability. The provided data does not indicate that unauthenticated users can trigger it.
What access and interaction are required for exploitation?
Exploitation requires low-level privileges and does not require user interaction. The attack can be performed over the network with low attack complexity.
Which deployment is identified as affected?
IBM Guardium Data Protection 12.2 is identified as affected. No information is provided about other versions or whether a default configuration is vulnerable.
What impact could successful exploitation have?
A successful attacker could execute arbitrary code. The supplied vector indicates high confidentiality and integrity impact, no availability impact, and a changed scope.