CVE-2026-84247: IBM Guardium Data Protection is affected by multiple vulnerabilities.
Published Sep 17, 2026
·Updated
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
Affected Software
4 affected components
IBM Guardium Data Protection<=12.1
IBM Guardium Data Protection<=12.2
IBM Guardium Data Protection=12.1
IBM Guardium Data Protection=12.2
Remediation
Information
IBM encourages customers to update their systems promptly.
ProductVersions FixIBM Guardium Data Protection12.2 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p233_FixPack&includeSupersedes=0&source=fc
Patch Available
Event History
Sep 17, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Oct 8, 2026
CVE Published
via MITRE·09:27 PM
Data Sourced
via MITRE·09:27 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Is unauthenticated access sufficient to exploit this issue?
No. The reported attack scenario requires a remote attacker to be authenticated.