Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-84244 IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauth… https://www.cve.org/CVERecord?id=CVE-2026-84244
IBM patches 9 Guardium Data Protection flaws. • CVE-2026-84272: 9.8, missing auth in edge-controller • CVE-2026-84244: 9.3, stored XSS via database traffic • 7 more high-severity issues in protocol parsers and local components https://thecircuitry.to/article/ibm-patches-nine-guardium-data-protection-flaws-muzzrpku https://t.co/7WMtaJJVJu
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | guardium_data_protection | 12.2 | - | - |