CVE-2026-84237: IBM Guardium Data Protection is affected by multiple vulnerabilities

Q: Who is exposed to this issue?

IBM Guardium Data Protection deployments are affected if they run version 12.2.4. Exploitation is remote but requires an authenticated attacker with low-level privileges.

Q: What does an attacker need to do to exploit it?

The attacker needs valid authentication and must successfully exploit pathname handling that does not properly restrict access to an intended directory. The attack complexity is rated high, and no user interaction is required.

Q: What is the likely impact of successful exploitation?

A successful attacker may obtain sensitive information. The available data indicates confidentiality impact only; integrity and availability impacts are not indicated.

Published Nov 6, 2026

Updated

IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.

Other sources

IBM Guardium Data Protection could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.

— IBM

Affected Software

1 affected component

IBM Guardium Data Protection<=12.2.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Guardium Data Protection to a version that resolves this vulnerability.
Fixed in 12.2.4Patch SqlGuard_12.0p7240_GPU_Oct_2026_V12.2.4_FC

Event History

Nov 6, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·06:42 PM

Data Sourced

via MITRE·06:42 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7295791

Frequently Asked Questions

Who is exposed to this issue?

IBM Guardium Data Protection deployments are affected if they run version 12.2.4. Exploitation is remote but requires an authenticated attacker with low-level privileges.

What does an attacker need to do to exploit it?

The attacker needs valid authentication and must successfully exploit pathname handling that does not properly restrict access to an intended directory. The attack complexity is rated high, and no user interaction is required.

What is the likely impact of successful exploitation?

A successful attacker may obtain sensitive information. The available data indicates confidentiality impact only; integrity and availability impacts are not indicated.

CVE-2026-84237: IBM Guardium Data Protection is affected by multiple vulnerabilities

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to exploit it?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to exploit it?

What is the likely impact of successful exploitation?