CVE Intelligence
Analysis AI-assisted

CVE-2026-84082: IBM Guardium Data Protection SQL injection (CWE-89)

IBM Guardium Data Protection 12.2 contains an SQL injection weakness (CWE-89) that the record says could allow a remote attacker to run arbitrary SQL commands. The CVSS 3.1 base score is 9.8 (critical), and IBM references a patch. No confirmed exploitation appears in the sources consulted.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

IBM Guardium Data Protection 12.2 is affected by an SQL injection weakness classified as CWE-89. According to the record, improper neutralization of special elements in an SQL command could let a remote attacker run arbitrary SQL commands. IBM is the CNA and points to a patch in its support advisory.

Impact

  • The CVSS 3.1 vector rates confidentiality, integrity and availability impact as high, with a base score of 9.8 (critical).
  • Successful exploitation could expose or alter data handled by the database layer of the product.

Affected products and versions

  • Product: IBM Guardium Data Protection.
  • Version listed in the record: 12.2. The sources consulted do not list other affected versions.

Exploitation status

The record shows kev.listed as false, so this CVE does not appear in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted. The SSVC fields in the record (exploitation none, automatable yes) are assessments, not reports of observed attacks.

Remediation and mitigation

  • Review the IBM support advisory and apply the patch it describes.
  • Confirm which build of version 12.2 is installed and whether the vendor fix is present.
  • Limit network access to management interfaces to trusted administrators until patching is complete.

Detection guidance

  • Review database and application logs for unexpected query errors or SQL activity that does not match normal product behavior.
  • Monitor for unusual administrative sessions or unexpected configuration changes on the appliance.

Limitations of the available information

  • The record title refers to multiple vulnerabilities, but the description covers a single SQL injection weakness. The record does not list the others.
  • The record does not state the exact fixed build; the IBM advisory should be consulted for that detail.
  • The EPSS probability is 0.00673 with a percentile of 0.51548 at the recorded date, which is an estimate and not evidence of exploitation.

Frequently asked questions

What is the vulnerability in IBM Guardium Data Protection 12.2?

The record describes an SQL injection weakness (CWE-89) where improper neutralization of special elements in an SQL command could let a remote attacker run arbitrary SQL commands.

Is this CVE known to be exploited in the wild?

The record shows kev.listed as false and no confirmed exploitation appears in the sources consulted. The SSVC fields are assessments, not observed attacks.

What should administrators do first?

Review the IBM support advisory at node 7288040, confirm the installed build of version 12.2, and apply the vendor patch while limiting access to management interfaces.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.