CVE-2026-84244: critical vulnerability in IBM Guardium Data Protection
IBM Guardium Data Protection Cross-Site Scripting
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 0.2%
IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Affected products
IBM · Guardium Data ProtectionRelated CVEs — IBM Guardium Data Protection
In the same product, most dangerous first.
CVE-2026-85542HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 3.0%CVE-2026-84278HIGHIBM Guardium Data Protection Command InjectionEPSS 2.5%CVE-2026-84071HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.5%CVE-2026-81937HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.5%CVE-2026-81669HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.3%CVE-2026-84086HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.9%