5.5
Medium
CVE-2026-4918 IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting
Description
IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Protection 12.1 | 12.1.0 → 2.3.0 | No fix stated |
Other CVEs of Guardium Data Protection
The 92 CVEs of Guardium Data Protection →
CVE-2026-82891
IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use…
8.1
High
CVE-2026-75875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path…
9.8
Critical
CVE-2026-80381
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements…
9.8
Critical
CVE-2026-82895
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a…
8.1
High