EUVD-2026-83435
GHSA-8x2r-f5pm-qh9h
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vector explicitly states unauthenticated network access (PR:N/AV:N) with no interaction; direct first-order SQLi yields AC:L and full C/I/A against the app database, scope unchanged (S:U).
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
AnalysisAI
Unauthenticated SQL injection in IBM Guardium Data Protection 12.2 lets a remote attacker submit crafted input that is concatenated into a SQL statement without proper neutralization, enabling execution of arbitrary SQL commands with full confidentiality, integrity, and availability impact (CVSS 3.1 base 9.8, AV:N/AC:L/PR:N/UI:N). Per the assessed vector, no credentials and no user interaction are required, so any party who can reach the affected interface over the network can attempt exploitation; the practical barrier is deployment exposure, since Guardium management interfaces are normally placed on segmented internal or security-monitoring networks rather than being internet-facing. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The CVSS vector (PR:N/UI:N/AV:N) indicates no authentication and no user interaction are required - unauthenticated remote exploitation against a network-reachable Guardium Data Protection 12.2 instance. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) describes a fully remote, unauthenticated, low-complexity SQL injection with full confidentiality, integrity, and availability impact - a genuinely high-priority profile if the vulnerable endpoint is network-reachable. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch status per the source data: Patch available per vendor advisory, with the IBM Support page https://www.ibm.com/support/pages/node/7288040 cited as the patch reference; no exact patched version number or interim fix is given in the provided input, so consult that page to confirm the precise fix or interim-fix level for your 12.2 build before declaring the instance remediated. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm whether your estate runs IBM Guardium Data Protection 12.2, inventory all management interfaces and their network reachability, and isolate the affected appliances behind segmentation and allow-listed administrative access only; treat any internet-exposed or broadly reachable instance as urgent. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Guardium Data Protection
View allSQL injection in IBM Guardium Data Protection 12.2 allows a remote authenticated attacker to execute arbitrary SQL comma
Unauthenticated remote attackers can bypass security restrictions in IBM Guardium Data Protection 12.2 through the Chang
Missing authentication in the LoadBalancerServlet of IBM Guardium Data Protection 12.2 allows unauthenticated, network-r
Unauthenticated remote code execution in IBM Guardium Data Protection 12.2 lets a network attacker who can reach the app
Unauthenticated insecure deserialization in the Change Audit System (CAS) listener of IBM Guardium Data Protection 12.2
Authentication bypass in IBM Guardium Data Protection 12.2 lets an unauthenticated remote attacker evade the IP-based ac
Second-order SQL injection in IBM Guardium Data Protection 12.2 allows an unauthenticated remote attacker to submit SQL
Unauthenticated path traversal in IBM Guardium Data Protection 12.0, 12.1, and 12.2 can be leveraged by remote attackers
Unauthenticated SQL injection in IBM Guardium Data Protection 12.0, 12.1, and 12.2 allows a remote attacker to execute u
Missing authentication on a critical management function in IBM Guardium Data Protection 12.2 and 12.2.2 allows unauthen
Missing authentication in the edge-controller component of IBM Guardium Data Protection 12.1 and 12.2.2 allows unauthent
Stored cross-site scripting in IBM Guardium Data Protection 12.2 lets an authenticated user of the web management consol
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today