IBM Guardium Data Protection
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in IBM Guardium Data Protection.
By the Year
In 2026 there have been 90 vulnerabilities in IBM Guardium Data Protection with an average score of 7.9 out of ten. Last year, in 2025 Guardium Data Protection had 2 security vulnerabilities published. That is, 88 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 1.56.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 90 | 7.86 |
| 2025 | 2 | 6.30 |
It may take a day or so for new Guardium Data Protection vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Guardium Data Protection Security Vulnerabilities
IBM Guardium Data Protection <12.3 RCE via Path Traversal
CVE-2026-75875
9.8 - Critical
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.
Directory traversal
IBM Guardium DP 12.0-12.2 SQL Injection Remote Execution
CVE-2026-80381
9.8 - Critical
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.
SQL Injection
IBM Guardium DP 12.x Remote Code Exec via Buffer Overflow
CVE-2026-82895
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Classic Buffer Overflow
IBM Guardium DP 12.2.2 Remote File Delete via Path Traversal
CVE-2026-82900
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.
Directory traversal
SQLi in IBM Guardium Data Protection 12.0-12.2
CVE-2026-81932
8.6 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
SQL Injection
IBM Guardium Data Protect 12.2.2 MITM via Erroneous Cert Validation
CVE-2026-84032
5.6 - Medium
- October 08, 2026
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.
Improper Certificate Validation
IBM Guardium Data Protection 12.x Stack Buffer Overflow RCE
CVE-2026-84035
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
Stack Overflow
IBM Guardium DP 12.1/12.2.2 RCE via OS Command Injection
CVE-2026-84057
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Shell injection
IBM Guardium 12.x Collector: TDS PRELOGIN Buffer Overrun (DoS/Code)
CVE-2026-84058
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.
Buffer Overflow
IBM Guardium Data Protect 12.0-12.2 Remote Code Exec via Buffer Overflow
CVE-2026-84198
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Classic Buffer Overflow
IBM Guardium Data Protection 12.2.2 SQL Injection Remote Code Execution
CVE-2026-84209
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
SQL Injection
IBM Guardium Data Protection 12.2.2 DoS via Race Condition in Shared Map
CVE-2026-84230
7.5 - High
- October 08, 2026
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.
Race Condition
Remote Code Exec via Buffer Overflow in IBM Guardium DP <12.3
CVE-2026-84246
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Classic Buffer Overflow
IBM Guardium Data Protection 12.2 Path Traversal DoS Vulnerability
CVE-2026-84247
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
Directory traversal
IBM Guardium 12.2/12.2.2 - Missing Auth Allows Remote Ops
CVE-2026-84249
9.8 - Critical
- October 08, 2026
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.
Missing Authentication for Critical Function
IBM Guardium Data Protection 12.x RCE via Buffer Overflow
CVE-2026-84875
7.5 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Buffer Overflow
IBM Guardium Data Protection 12.x Hard-Coded Credentials Remote Info Disclosure
CVE-2026-84891
5.9 - Medium
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.
Use of Hard-coded Credentials
Local Log Data Leakage in IBM Guardium Data Protection 12.2
CVE-2026-87980
3.1 - Low
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.
Insertion of Sensitive Information into Log File
IBM Guardium Data Protection 12.x Heap OOB Read in TDS7 LOGIN7 Parser
CVE-2026-82334
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service.
Out-of-bounds Read
IBM Guardium Data Protect 12.x Heap Overflow via MongoDB SCRAM Auth
CVE-2026-82335
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution.
Buffer Overflow
IBM Guardium Data Protection 12.x Heap Buffer Overflow in STAP TDS Login
CVE-2026-82344
8.1 - High
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.
Buffer Overflow
IBM Guardium Data Protection 12.2 XSS in Quick Search Grid (Stored)
CVE-2026-84244
9.3 - Critical
- October 08, 2026
IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user.
XSS
IBM Guardium DP 12.2 LPE via cp_wrapper
CVE-2026-84245
7.8 - High
- October 08, 2026
IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files.
Improper Privilege Management
IBM Guardium Data Protection 12.2 Weak Crypto pkcrypto passkey
CVE-2026-84250
8.4 - High
- October 08, 2026
IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges.
Use of Hard-coded Credentials
IBM Guardium DP 12.2 Signature Verification Bypass in Patch Installer
CVE-2026-84271
7.8 - High
- October 08, 2026
IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges.
Race Condition
IBM Guardium DP 12.1/12.2.2 Edge-Controller Auth Bypass: Container Exec
CVE-2026-84272
9.8 - Critical
- October 08, 2026
IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.
Missing Authentication for Critical Function
IBM Guardium 12.2.2 SII via INFO Logging in edge-controller
CVE-2026-84274
6.5 - Medium
- October 08, 2026
IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or container logs could obtain these credentials and use them to impersonate services or gain unauthorized access to the Guardium control plane.
Information Disclosure
IBM Guardium Data Protection 12.2 Path Traversal in GIM File-Upload
CVE-2026-84275
7.5 - High
- October 08, 2026
IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector.
Directory traversal
IBM Guardium Data Protection 12.2.2 edge-controller DoS via gRPC malformed data
CVE-2026-84276
7.5 - High
- October 08, 2026
IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the edge-controller process to terminate unexpectedly.
Resource Exhaustion
IBM Guardium DP 12.2 Command Injection in SUID-ssh_config_wrapper
CVE-2026-84278
7.2 - High
- October 08, 2026
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges.
Shell injection
IBM Guardium 12.0-12.2 WfpMonitor ptr deref CVE-2026-84290
CVE-2026-84290
5.1 - Medium
- October 08, 2026
IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads.
Buffer Overflow
IBM Guardium Data Protection 12.2 CLI SMIME Deletion Command Injection
CVE-2026-84422
7.2 - High
- September 29, 2026
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.
Shell injection
IBM Guardium DP 12.2 CLI Cert Export Cmd Inject (Root Exec)
CVE-2026-84436
9.1 - Critical
- September 29, 2026
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges.
Shell injection
Root-Priv Command Injection in IBM Guardium DP 12.2 SNMP Alerter
CVE-2026-84440
7.5 - High
- September 29, 2026
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs with root privileges.
Shell injection
IBM Guardium 12.2 Path Traversal & File Deletion in Datasource REST
CVE-2026-84842
8.1 - High
- September 29, 2026
IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity.
Directory traversal
IBM Guardium 12.2 insecure deserialization in Quartz JDBC job store
CVE-2026-84862
7.2 - High
- September 25, 2026
IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbitrary code on the affected system.
Marshaling, Unmarshaling
IBM Guardium 12.2 UC Oracle Wallet Path Traversal Write Arbitrary Files
CVE-2026-84882
7.5 - High
- September 25, 2026
IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system.
Directory traversal
IBM Guardium 12.2 REST Service-Account Password Stored in Reversible Plaintext
CVE-2026-84884
7.5 - High
- September 25, 2026
IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token.
Unprotected Storage of Credentials
IBM Guardium Data Protection 12.2 SQL Injection in PESI Service
CVE-2026-84893
7.6 - High
- September 25, 2026
IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.
SQL Injection
IBM Guardium 12.2 Pathname Traversal Enables Arbitrary File Delete/Exec
CVE-2026-85029
7.5 - High
- September 25, 2026
IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory.
Directory traversal
IBM Guardium Data Protection 12.2 GIM Bundle Import Command Injection
CVE-2026-85542
8.8 - High
- September 25, 2026
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager.
Shell injection
IBM Guardium DP 12.2 Err Message Data Exposure to Admins
CVE-2026-4921
2.7 - Low
- September 23, 2026
IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Generation of Error Message Containing Sensitive Information
IBM Guardium DP 12.2 SQLi Remote Authenticated Data Leakage
CVE-2026-84239
7.6 - High
- September 18, 2026
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
SQL Injection
IBM Guardium Data Protection 12.2 Auth Bypass Vulnerability
CVE-2026-84241
8.1 - High
- September 18, 2026
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization.
AuthZ
IBM Guardium Data Protection 12.2 RCE via unsanitized input in web page
CVE-2026-84108
8.1 - High
- September 18, 2026
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation.
XSS
IBM Guardium DP 12.2 Web UI RCE via improper input neutralization
CVE-2026-84106
8.9 - High
- September 18, 2026
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
XSS
IBM Guardium Data Protection 12.2 SQL Injection via Improper Neutralization
CVE-2026-84105
7.7 - High
- September 18, 2026
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
SQL Injection
IBM Guardium DP 12.2 Local Priv Esc via Improper Priv Mgmt
CVE-2026-84089
7.8 - High
- September 18, 2026
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
Improper Privilege Management
IBM Guardium 12.2 Pathname Handling Remote Auth Attacker Code Exec
CVE-2026-84086
7.2 - High
- September 18, 2026
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.
Directory traversal
IBM Guardium Data Protection 12.2 Remote Execution via OS Command Injection
CVE-2026-84085
8.1 - High
- September 18, 2026
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.
Shell injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for IBM Guardium Data Protection or by IBM? Click the Watch button to subscribe.
