Description
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Published: 2026-10-08
Score: 8.6 High
EPSS: < 1% Very Low
KEV: No
Impact: SQL Injection with Data Manipulation
Action: Immediate Patch
AI Analysis

Impact

IBM Guardium Data Protection 12.x versions contain a SQL injection flaw in the Sniffer component that allows a remote, unauthenticated attacker to send crafted statements. The vulnerability can lead to the viewing, addition, alteration, or removal of data stored in the back‐end database. This represents a significant loss of confidentiality and integrity for the protected data. The weakness is classified as CWE‑89, a classic SQL injection defect.

Affected Systems

The affected products are IBM Guardium Data Protection versions 12.0, 12.1, and 12.2, which encompass releases 12.0.0 through 12.2.0 and their associated update patches. All deployments of the Sniffer component within these releases are susceptible.

Risk and Exploitability

The CVSS score of 8.6 indicates high severity, and the EPSS score is not available, meaning its exploitation probability is unknown at this time. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote and unauthenticated, requiring only the ability for an attacker to send specially crafted SQL statements to the Sniffer endpoint. Successful exploitation would give the attacker direct manipulation of the database used by Guardium.

Generated by OpenCVE AI on October 8, 2026 at 22:54 UTC.

Remediation

Vendor Solution

For all affected versions, IBM strongly recommends addressing these vulnerabilities now by applying the latest IBM Guardium Data Protection Sniffer patch:  https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=All&function=fixId&fixids=SqlGuard_12.0p4018_SnifferUpdate&includeSupersedes=0&source=fc

OpenCVE Recommended Actions

  • Apply the latest IBM Guardium Data Protection Sniffer patch from the official fix page
  • Ensure that the Sniffer network port is restricted to trusted hosts or virtual networks
  • Monitor database logs for unusual or injection-like query patterns

Generated by OpenCVE AI on October 8, 2026 at 22:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:ibm:guardium_data_protection:*:*:*:*:*:*:*:*

Mon, 12 Oct 2026 23:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 21:45:00 +0000

Type Values Removed Values Added
Description IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Title Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
First Time appeared Ibm
Ibm guardium Data Protection
Weaknesses CWE-89
CPEs cpe:2.3:a:ibm:guardium_data_protection:12.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm guardium Data Protection
References
Metrics cvssV3_1

{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L'}

Subscriptions

Ibm Guardium Data Protection
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-12T22:54:02.136Z

Reserved: 2026-08-27T18:53:27.510Z

Link: CVE-2026-81932

cve-icon Vulnrichment

Updated: 2026-10-12T22:52:58.125Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-08T22:17:32.493

Modified: 2026-10-14T20:34:43.387

Link: CVE-2026-81932

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T23:00:15Z

Weaknesses
  • CWE-89

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')