CVE-2026-84228: IBM Guardium Data Protection is affected by multiple vulnerabilities

Q: Who is exposed to this issue?

IBM Guardium Data Protection deployments running version 12.2.4 are identified as affected. Exploitation requires remote access and an authenticated account with low privileges.

Q: What is the impact if exploitation succeeds?

A successful attacker could obtain sensitive information. The provided vector indicates confidentiality impact only; no integrity or availability impact is specified.

Q: Is exploitation straightforward?

No. The supplied CVSS vector rates attack complexity as high, although no user interaction is required once the attacker has the needed authenticated access.

Published Nov 6, 2026

Updated

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.

Other sources

IBM Guardium Data Protection could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.

— IBM

Affected Software

1 affected component

IBM Guardium Data Protection<=12.2.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Guardium Data Protection to a version that resolves this vulnerability.
Patch SqlGuard_12.0p7240_GPU_Oct_2026_V12.2.4_FC

Event History

Nov 6, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·06:42 PM

Data Sourced

via MITRE·06:42 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7295791

Frequently Asked Questions

Who is exposed to this issue?

IBM Guardium Data Protection deployments running version 12.2.4 are identified as affected. Exploitation requires remote access and an authenticated account with low privileges.

What is the impact if exploitation succeeds?

A successful attacker could obtain sensitive information. The provided vector indicates confidentiality impact only; no integrity or availability impact is specified.

Is exploitation straightforward?

No. The supplied CVSS vector rates attack complexity as high, although no user interaction is required once the attacker has the needed authenticated access.

CVE-2026-84228: IBM Guardium Data Protection is affected by multiple vulnerabilities

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who is exposed to this issue?

What is the impact if exploitation succeeds?

Is exploitation straightforward?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What is the impact if exploitation succeeds?

Is exploitation straightforward?