CRITICAL 9.3 NVD
CVE-2026-84244
IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An
IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user.
Affected Products
- ibm/guardium_data_protection
References
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-10-08 via NVD. Affected: ibm/guardium_data_protection.
Risk Timeline
CVE Disclosed2026-10-08 · 3 days ago
Remediation Resources
Analysis & PoC
www.ibm.com/support/pages/node/7288035Related Vulnerabilities
| CVE | Title | Severity | CVSS |
|---|---|---|---|
| CVE-2026-84272 | IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentic | CRITICAL | 9.8 |
| CVE-2026-78401 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access | CRITICAL | 9.8 |
| CVE-2026-78406 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access | CRITICAL | 9.8 |
| CVE-2026-16823 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access | CRITICAL | 9.1 |
| CVE-2026-16916 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access | CRITICAL | 9.1 |
| CVE-2026-19491 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access | CRITICAL | 9.1 |
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.