7.5
Élevée
CVE-2026-84440 IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality
Description
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs with root privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Guardium Data Protection | 12.2 | Pas de correctif indiqué |
Autres CVE de Guardium Data Protection
Les 92 CVE de Guardium Data Protection →
CVE-2026-82891
IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use…
8.1
Élevée
CVE-2026-75875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path…
9.8
Critique
CVE-2026-80381
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements…
9.8
Critique
CVE-2026-82895
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a…
8.1
Élevée