6 CVEs publicados el 2026-10-09 · CVSS máximo 9.8/10.
Producto afectado
IBM Guardium Data Protection 12.0
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2026-75875 | CRITICAL | 9.8 | — | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal. | |
| CVE-2026-80381 | CRITICAL | 9.8 | — | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection. | |
| CVE-2026-81932 | HIGH | 8.6 | 0.3% | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to… | |
| CVE-2026-82334 | HIGH | 8.1 | — | IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. | |
| CVE-2026-82335 | HIGH | 8.1 | — | IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. | |
| CVE-2026-82344 | HIGH | 8.1 | — | IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. |