CVE-2026-84229: IBM Guardium Data Protection is affected by multiple vulnerabilities

Q: What must an attacker do to exploit this issue?

The attacker must induce user interaction, consistent with the UI:R vector. Exploitation is remote and requires no attacker privileges.

Q: Which deployments are identified as affected?

The provided information identifies IBM Guardium Data Protection 12.2.4 as affected. No information is provided about default configuration requirements or other versions.

Q: What is the likely security impact?

The issue can allow security restrictions to be bypassed through improper validation of CSRF tokens on GET requests. The supplied vector indicates integrity impact, with no stated confidentiality or availability impact.

Published Nov 6, 2026

Updated

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests.

Other sources

IBM Guardium Data Protection could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests.

— IBM

Affected Software

1 affected component

IBM Guardium Data Protection<=12.2.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Guardium Data Protection to a version that resolves this vulnerability.
Fixed in 12.2.4Patch SqlGuard_12.0p7240_GPU_Oct_2026_V12.2.4_FC

Event History

Nov 6, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·06:42 PM

Data Sourced

via MITRE·06:42 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7295791

Frequently Asked Questions

What must an attacker do to exploit this issue?

The attacker must induce user interaction, consistent with the UI:R vector. Exploitation is remote and requires no attacker privileges.

Which deployments are identified as affected?

The provided information identifies IBM Guardium Data Protection 12.2.4 as affected. No information is provided about default configuration requirements or other versions.

What is the likely security impact?

The issue can allow security restrictions to be bypassed through improper validation of CSRF tokens on GET requests. The supplied vector indicates integrity impact, with no stated confidentiality or availability impact.

CVE-2026-84229: IBM Guardium Data Protection is affected by multiple vulnerabilities

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which deployments are identified as affected?

What is the likely security impact?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which deployments are identified as affected?

What is the likely security impact?