Description
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.
Published: 2026-10-08
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized SQL execution
Action: Immediate Patch
AI Analysis

Impact

This vulnerability is a classic SQL injection flaw in the Sniffer component of IBM Guardium Data Protection. The flaw allows an attacker who can reach the component to embed malicious SQL commands, which are executed against the backend data store using the privileges granted to the Sniffer. The result is unauthorized execution of SQL statements that can compromise data confidentiality, integrity, and availability. The weakness is classified under CWE‑89.

Affected Systems

IBM Guardium Data Protection 12.0, 12.1, and 12.2; the vulnerability affects the Sniffer component in each of these releases.

Risk and Exploitability

The CVSS base score of 9.8 indicates a critical severity. EPSS information is not available, but the high score reflects a high likelihood of exploitation against exposed network reachable Sniffer instances. Since the vulnerability is not yet listed in the CISA KEV catalog, it may not have known exploits yet, but the potential impact remains high, especially if the Sniffer component is accessible from untrusted hosts.

Generated by OpenCVE AI on October 8, 2026 at 22:54 UTC.

Remediation

Vendor Solution

For all affected versions, IBM strongly recommends addressing these vulnerabilities now by applying the latest IBM Guardium Data Protection Sniffer patch:  https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=All&function=fixId&fixids=SqlGuard_12.0p4018_SnifferUpdate&includeSupersedes=0&source=fc

OpenCVE Recommended Actions

  • Apply the latest IBM Guardium Sniffer patch via IBM Fix Central
  • Restrict network access to the Sniffer component so that only trusted management hosts can reach it
  • Configure the Sniffer to use a least‑privilege database account and enforce input validation to prevent injection
  • Enable detailed logging and continuously monitor SQL activity for anomalous queries originating from the Sniffer

Generated by OpenCVE AI on October 8, 2026 at 22:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:ibm:guardium_data_protection:*:*:*:*:*:*:*:*

Sat, 10 Oct 2026 05:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 21:45:00 +0000

Type Values Removed Values Added
Description IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.
Title Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
First Time appeared Ibm
Ibm guardium Data Protection
Weaknesses CWE-89
CPEs cpe:2.3:a:ibm:guardium_data_protection:12.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm guardium Data Protection
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Guardium Data Protection
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-10T03:55:26.123Z

Reserved: 2026-08-26T10:29:08.292Z

Link: CVE-2026-80381

cve-icon Vulnrichment

Updated: 2026-10-09T14:42:54.060Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-08T22:17:32.353

Modified: 2026-10-14T20:34:54.673

Link: CVE-2026-80381

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T23:00:15Z

Weaknesses
  • CWE-89

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')