Login Request a demo
Medium severity · published Sep 25, 2026
CVE-2026-84893
IBM Guardium Data Protection is affected by multiple vulnerabilities.
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Guardium Data Protection · IBM
12.2 · source: vendor, NVD
Affected product
GD
Guardium Data Protection
IBM
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-84893
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-84893
Vendor Advisory
https://www.ibm.com/support/pages/node/7288035
More from Guardium Data Protection
9.9
CVE-2026-84078
IBM Guardium Data Protection is affected by multiple vulnerabilities.
9.9
CVE-2026-84075
IBM Guardium Data Protection is affected by multiple vulnerabilities.
9.9
CVE-2026-84064
IBM Guardium Data Protection is affected by multiple vulnerabilities.
9.8
CVE-2026-75875
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
9.8
CVE-2026-80381
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection