AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-84882

IBM Guardium Data Protection: path traversal

IBM

CVE-2026-84882 · Published Sep 25, 2026 · updated Sep 26, 2026

High7.5
No fix yet
IBM advisory

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system.

Affected versions

PackageAffectedFixed in
Guardium Data Protection
Product
<= 12.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-22

More IBM advisories

All IBM
High 7.2Sep 25IBM Guardium Data Protection: unsafe deserializationCVE-2026-84862no fix yetMedium 6.5Sep 25IBM Financial Transaction Manager for Redhat OpenShift: information disclosureCVE-2026-93030no fix yetHigh 7.1Sep 25IBM Server Firmware: memory corruptionCVE-2026-93306no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: information disclosureCVE-2026-85029no fix yetHigh 8.8Sep 25IBM Guardium Data Protection: command injectionCVE-2026-85542no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: plaintext password storageCVE-2026-84884no fix yet