Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 41

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00382 Published 2026-10-08 No fix listed CWE-22
Priority MEDIUM 43

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2026-10-08 No fix listed CWE-78
Priority MEDIUM 43

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2026-10-08 No fix listed CWE-89
Priority MEDIUM 49

IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00401 Published 2026-10-08 No fix listed CWE-306