CVE-2026-84030: IBM Guardium Data Protection is affected by multiple vulnerabilities

Q: Does an attacker need valid credentials to exploit this issue?

No. The CVSS vector lists privileges required as none, and the attack vector is network-based.

Q: How difficult is exploitation expected to be?

The CVSS vector rates attack complexity as high, indicating exploitation requires conditions beyond simply sending a request to a reachable target.

Q: What security impact could successful exploitation have?

Successful SQL injection could result in limited confidentiality, integrity, and availability impact according to the CVSS vector.

Q: Which product version is identified as affected?

The provided information identifies IBM Guardium Data Protection 12.2.4 as affected.

Published Nov 6, 2026

Updated

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

Other sources

IBM Guardium Data Protection could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

— IBM

Affected Software

1 affected component

IBM Guardium Data Protection<=12.2.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Guardium Data Protection to a version that resolves this vulnerability.
Patch SqlGuard_12.0p7240_GPU_Oct_2026_V12.2.4_FC

Event History

Nov 6, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·06:41 PM

Data Sourced

via MITRE·06:41 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7295791

Frequently Asked Questions

Does an attacker need valid credentials to exploit this issue?

No. The CVSS vector lists privileges required as none, and the attack vector is network-based.

How difficult is exploitation expected to be?

The CVSS vector rates attack complexity as high, indicating exploitation requires conditions beyond simply sending a request to a reachable target.

What security impact could successful exploitation have?

Successful SQL injection could result in limited confidentiality, integrity, and availability impact according to the CVSS vector.

Which product version is identified as affected?

The provided information identifies IBM Guardium Data Protection 12.2.4 as affected.

CVE-2026-84030: IBM Guardium Data Protection is affected by multiple vulnerabilities

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Does an attacker need valid credentials to exploit this issue?

How difficult is exploitation expected to be?

What security impact could successful exploitation have?

Which product version is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Does an attacker need valid credentials to exploit this issue?

How difficult is exploitation expected to be?

What security impact could successful exploitation have?

Which product version is identified as affected?