IBM
IBM Guardium Data Protection: vulnerabilidades y CVE
IBM Guardium Data Protection tiene 61 vulnerabilidades publicadas, 59 de ellas en los últimos 12 meses. 13 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE61
Últimos 12 meses59
Críticas13
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-84842 | Alta (8.1) | 0.38% | — | 29 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and… |
| CVE-2026-84440 | Alta (8.8) | 0.67% | — | 29 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be… |
| CVE-2026-84436 | Crítica (9.1) | 0.68% | — | 29 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges. |
| CVE-2026-84422 | Alta (7.2) | 0.68% | — | 29 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root… |
| CVE-2026-84882 | Alta (7.5) | 0.33% | — | 25 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to… |
| CVE-2026-84862 | Alta (7.2) | 0.37% | — | 25 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbitrary code on the affected system. |
| CVE-2026-85542 | Alta (8.8) | 2.4% | — | 25 sept 2026 | IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled… |
| CVE-2026-85029 | Alta (7.5) | 0.54% | — | 25 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory. |
| CVE-2026-84893 | Alta (7.6) | 0.18% | — | 25 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database. |
| CVE-2026-84884 | Alta (7.5) | 0.24% | — | 25 sept 2026 | IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the… |
| CVE-2026-4921 | Baja (2.7) | 0.19% | — | 23 sept 2026 | IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks… |
| CVE-2026-84241 | Alta (8.1) | 0.47% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization. |
| CVE-2026-84239 | Alta (7.6) | 0.55% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command. |
| CVE-2026-84108 | Alta (8.1) | 0.63% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-84106 | Alta (8.9) | 0.52% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-84105 | Alta (7.7) | 0.46% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command. |
| CVE-2026-84089 | Alta (7.8) | 0.14% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management. |
| CVE-2026-84086 | Alta (7.2) | 0.87% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory. |
| CVE-2026-84085 | Alta (8.1) | 0.50% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-84084 | Alta (8.8) | 0.25% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability. |
| CVE-2026-84083 | Alta (7.8) | 0.15% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit… |
| CVE-2026-84082 | Crítica (9.8) | 0.67% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. |
| CVE-2026-84081 | Alta (8.1) | 0.31% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation. |
| CVE-2026-84078 | Crítica (9.9) | 0.47% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in… |
| CVE-2026-84077 | Alta (8.1) | 0.26% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability. |
| CVE-2026-84076 | Alta (7.6) | 0.41% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. |
| CVE-2026-84075 | Crítica (9.9) | 0.59% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet. |
| CVE-2026-84074 | Alta (8.9) | 0.52% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-84073 | Crítica (9.1) | 0.43% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. |
| CVE-2026-84071 | Alta (7.2) | 1.5% | — | 18 sept 2026 | IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de IBM
AIX · 551Websphere Application Server · 519DB2 · 355Vios · 237Sterling B2B Integrator · 205I · 203Rational Quality Manager · 202Qradar Security Information AND Event Manager · 192Infosphere Information Server · 189Maximo Asset Management · 182Rational Doors Next Generation · 153Rational Team Concert · 142