The vulnerability is a classic SQL injection flaw (CWE-89) that allows a remote attacker to insert and execute arbitrary SQL statements in IBM Guardium Data Protection 12.2.4. The defect arises from improper neutralization of special elements used in an SQL command. If exploited, the attacker could perform any database operation that the application’s database user is permitted to execute, potentially compromising the confidentiality, integrity, or availability of stored data.

IBM Guardium Data Protection, version 12.2.4. The defect is present in the component that constructs and runs SQL commands based on user input, and the fix is issued in IBM’s 12.2.4 update available from IBM Fix Central.

The CVSS score of 5.6 indicates moderate severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no known widespread exploitation has occurred. The likely attack vector is remote, via any interface that accepts SQL input; an attacker would need network access to the Guardium service. Given the moderate CVSS and lack of known public exploits, the likelihood of exploitation is moderate to low if defensive controls are in place, although the impact could be significant if the underlying database user has broad privileges.