The vulnerability enables a malicious actor to inject special elements that are not properly neutralized within an SQL command, permitting the execution of arbitrary SQL commands against the Guardium database. This SQL injection flaw could lead to unauthorized data exfiltration, modification, or deletion, effectively granting the attacker control over data stored by the Guardium product. The weakness is identified as a classic SQL injection, mapped to CWE-89.

This weakness affects IBM Guardium Data Protection versions 12.1 and 12.2.2. The product name is Guardium Data Protection, distributed by IBM.

The CVSS base score of 8.1 assigns this issue a high severity level. Because the EPSS score is not available and it is not listed in the CISA KEV catalog, the precise exploitation probability is unknown, but the risk remains significant. The most likely path for exploitation involves a remote attacker forging an HTTP request or abusing an exposed API that accepts user-supplied input, which then is concatenated into a direct SQL statement. The attacker would need network access to the Guardium server or its externally exposed interfaces. This inference is based on the description of improper neutralization of elements in an SQL command.