7.2
Élevée
CVE-2026-81937 IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file…
Description
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root privileges and impact to the confidentiality, integrity, and availability of the affected system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Guardium Data Protection | 12.2 | Pas de correctif indiqué |
Autres CVE de Guardium Data Protection
Les 92 CVE de Guardium Data Protection →
CVE-2026-82891
IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use…
8.1
Élevée
CVE-2026-75875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path…
9.8
Critique
CVE-2026-80381
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements…
9.8
Critique
CVE-2026-82895
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a…
8.1
Élevée