CVE-2026-84064: IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
Other sources
IBM Guardium Data Protection could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Fixed in 12.2Patch SqlGuard_12.0p233_FixPack
Event History
Frequently Asked Questions
What level of access does an attacker need?
An attacker must be remotely authenticated to exploit this issue. The available information does not specify which authenticated roles or privileges are sufficient.
What actions could an attacker perform if exploitation succeeds?
The issue could allow execution of arbitrary SQL commands. The available information does not identify the affected interface, database scope, or resulting data and system impact.