IBM Guardium Data Protection version 12.2 contains a flaw that allows a remote attacker who has authenticated credentials to supply crafted input through the web interface. The vulnerability is rooted in the failure to properly neutralize user‑supplied data during web page generation, which can lead to the execution of arbitrary code on the protected system. The weakness is identified as an improper neutralization of input, classified under CWE‑79, and results in a high severity risk for confidentiality, integrity, and availability.

The affected products are IBM Guardium Data Protection version 12.2 for Linux platforms. This includes the specific build referenced in the IBM fix catalog and the general 12.2 release series. Users running these versions should verify that they have installed the updated fix pack made available by IBM.

The CVSS score of 8.9 indicates a high impact vulnerability. Enterprise environments that expose the Guardium web interface present a clear attack surface for authenticated users. The EPSS score is < 1%, and the vulnerability is not listed in the CISA KEV catalog, but the combination of high severity and the existence of an authenticated‑remote attack vector means that exploitation is likely if attackers acquire valid credentials. The most probable path is an authenticated web user submitting malicious input that is not sanitized, leading to code execution on the Guardium host.