SQL Injection Vulnerability in IBM Guardium Data Protection
CVE-2026-84030

5.6MEDIUM

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
8 November 2026

What is CVE-2026-84030?

IBM Guardium Data Protection 12.2.4 has a vulnerability that allows a remote attacker to execute arbitrary SQL commands. This occurs due to improper handling of special elements used in SQL commands, opening potential risks for data breaches or unauthorized access to sensitive information. Proper security measures and patches are advised to mitigate this risk.

Affected Version(s)

Guardium Data Protection 12.2.4

References

https://www.ibm.com/support/pages/node/7295791
vendor-advisorypatch

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.