CVE-2026-84209: IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
Other sources
IBM Guardium Data Protection could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protection Edgeto a version that resolves this vulnerability.Patch 12.0p15004 - Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Patch 12.0p147
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The available information states that a remote attacker could exploit the issue, but it does not specify whether authentication, a particular role, or access to a specific interface is required.
What is the potential impact of successful exploitation?
A successful attacker could execute arbitrary SQL commands against IBM Guardium Data Protection.
Are default deployments affected, and what mitigations are available if patching is delayed?
The available information does not identify affected versions, default configuration conditions, or mitigations. Review IBM's referenced support advisory for product-specific remediation guidance.