IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.ibm.com/support/pages/node/7288035 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.5 · ibmNVD modified 2026-10-20 18:57
Affected (CPE criteria) 2
cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
References 1
- https://www.ibm.com/support/pages/node/7288035 Vendor Advisory