AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-84893

IBM Guardium Data Protection: SQL injection

IBM

CVE-2026-84893 · Published Sep 25, 2026

High7.6
No fix yet
IBM advisory

IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.

Affected versions

PackageAffectedFixed in
Guardium Data Protection
Product
<= 12.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-89

More IBM advisories

All IBM
High 7.2Sep 25IBM Guardium Data Protection: unsafe deserializationCVE-2026-84862no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: path traversalCVE-2026-84882no fix yetMedium 6.5Sep 25IBM Financial Transaction Manager for Redhat OpenShift: information disclosureCVE-2026-93030no fix yetHigh 7.1Sep 25IBM Server Firmware: memory corruptionCVE-2026-93306no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: information disclosureCVE-2026-85029no fix yetHigh 8.8Sep 25IBM Guardium Data Protection: command injectionCVE-2026-85542no fix yet