4.9
Medium
CVE-2026-4917 IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system
Description
IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Protection | 12.1 | No fix stated |
Other CVEs of Guardium Data Protection
The 97 CVEs of Guardium Data Protection →
CVE-2026-84237
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84229
IBM Guardium Data Protection is affected by multiple vulnerabilities
6.5
Medium
CVE-2026-84228
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84030
IBM Guardium Data Protection is affected by multiple vulnerabilities
5.6
Medium