8.8
High
CVE-2026-81656 IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor
Description
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the confidentiality, integrity, and availability of the affected system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Protection | 12.2 | No fix stated |
Other CVEs of Guardium Data Protection
The 97 CVEs of Guardium Data Protection →
CVE-2026-84237
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84229
IBM Guardium Data Protection is affected by multiple vulnerabilities
6.5
Medium
CVE-2026-84228
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84030
IBM Guardium Data Protection is affected by multiple vulnerabilities
5.6
Medium