IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.ibm.com/support/pages/node/7288035 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.5 · ibmNVD modified 2026-10-20 19:00
Affected (CPE criteria) 2
cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
References 1
- https://www.ibm.com/support/pages/node/7288035 Vendor Advisory