← CVE Intelligence

CVE-2026-80441

IBM Guardium Data Protection is affected by multiple vulnerabilities. PUBLISHED

Description (CNA)

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting in compromise of the confidentiality, integrity, and availability of the affected system.

Affected (CNA)

Vendor / productVersions
IBM / Guardium Data Protectionaffected 12.2

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.