IBM Guardium Data Protection 12.2 is susceptible to a path traversal flaw in the Universal Connector Oracle Wallet upload component. An attacker who can authenticate to the system may exploit this weakness to write arbitrary files to the underlying host filesystem. The ability to place files arbitrarily can lead to the execution of malicious code, resulting in full system compromise and the loss of confidentiality, integrity, and availability.

The vulnerability affects IBM Guardium Data Protection version 12.2, including sub‑version 12.2.0, as identified by the corresponding CPE strings. No other product or version data are disclosed in the available CNA information.

The CVSS base score of 7.5 marks this issue as high impact. The EPSS score is not available, and it is not listed in the CISA KEV catalog. The vulnerability requires authenticated access, but once achieved the path traversal allows unrestricted file writes, which is sufficient for remote code execution. Therefore, while the exploitation likelihood is unknown, the potential impact warrants proactive remediation.