Guardium Data Protection
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*
part: a version: 12.1.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Guardium Data Protection (3e256685-3ca5-552d-9803-1c601059f77f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4919 |
vulnerable | 2026-06-08 08:07:02.667371 |
IBM Guardium Data Protection is affected by multiple vulnerabilities
MEDIUM (4.8)
IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-04-22T23:23:34.961Z
Updated: 2026-04-23T13:56:47.605Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4918 |
vulnerable | 2026-06-08 08:07:02.667040 |
IBM Guardium Data Protection is affected by multiple vulnerabilities
MEDIUM (5.5)
IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-04-22T23:26:38.626Z
Updated: 2026-04-30T21:41:27.314Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4917 |
vulnerable | 2026-06-08 08:07:02.666387 |
IBM Guardium Data Protection is affected by multiple vulnerabilities
MEDIUM (4.9)
IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Published: 2026-04-22T23:27:45.961Z
Updated: 2026-04-23T16:24:06.376Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1274 |
vulnerable | 2026-06-08 07:49:08.114015 |
IBM Guardium Data Protection is affected by multiple vulnerabilities
MEDIUM (4.9)
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access management control panel.
Published: 2026-04-22T23:30:59.128Z
Updated: 2026-04-23T12:50:23.904Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1272 |
vulnerable | 2026-06-08 07:49:08.109587 |
IBM Guardium Data Protection is affected by multiple vulnerabilities
LOW (2.7)
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnerability in the user access control panel.
Published: 2026-04-22T23:33:45.499Z
Updated: 2026-04-23T16:23:59.338Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.