Executive brief
IBM Guardium Data Protection is a database security and monitoring platform that protects sensitive data in corporate databases. Multiple authorization flaws allow authenticated attackers to bypass security controls, gain elevated privileges, or execute arbitrary code, potentially leading to unauthorized data access, modification, or system compromise.
Technical details
IBM Guardium Data Protection 12.2 contains multiple authorization and input validation vulnerabilities including missing authorization in REST API (CVE-2026-82885), improper authorization in core functionality (CVE-2026-84036, CVE-2026-84077, CVE-2026-84241), CSRF attacks (CVE-2026-84084), SQL injection (CVE-2026-84105), OS command injection in SNMP and ssh_config_wrapper components (CVE-2026-84440, CVE-2026-84278), path traversal in Oracle Wallet upload (CVE-2026-84882), local privilege escalation (CVE-2026-84089, CVE-2026-84245), and XSS vulnerabilities (CVE-2026-84074, CVE-2026-84244). Exploitation ranges from unauthenticated CSRF/XSS to authenticated remote code execution and local privilege escalation to root.
Affected products
- IBM Guardium Data Protection 12.2
Timeline
- 2026-09-18: disclosed