CVE-2026-84244

critical · 9.3

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user.

9.3

CVSS

0.2%

EPSS (exploit prob.)

7th

EPSS percentile

2026-10-08

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Weaknesses

CWE-79

Affected products

Vendor	Product	Affected versions
ibm	guardium_data_protection	12.2

Check a specific version with /api/v1/cve/match.

References

https://www.ibm.com/support/pages/node/7288035

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-84244