Veille CVE

Mardi 20 octobre 2026

7 CVE

Critique 0 Élevée 4 Moyenne 2 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM Guardium Data Protection » ✕
  1. CVE-2026-84884 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token.

  2. CVE-2026-84882 6.5 Moyenne

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system.

  3. CVE-2026-84862 7.2 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbitrary code on the affected system.

  4. CVE-2026-85542 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager.

  5. CVE-2026-84893 6.5 Moyenne

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.

  6. CVE-2026-85029 8.8 Élevée

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory.

  7. CVE-2026-4921 2.7 Faible

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.