ibmCVE-2026-84882
IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component.
High7.5CVE-2026-84882 · Published Sep 25, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Guardium Data Protection Vendor | <= 12.2 | No fix yet |
Details and references
IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity from
- no source yet
- Weakness
- CWE-22