CVE-2026-84244

9.3

Critical

Published:8 Oct 2026

Last updated:9 Oct 2026

Source:psirt@us.ibm.com

Analyzed

Weakness (CWE)

CWE-79Cross-site Scripting (XSS)

CVSS Vector

v3.1

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Changed
Confidentiality: High
Integrity: Low
Availability: None

View on MITRE Find PoC on GitHub

Description

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user.

References

psirt@us.ibm.com

https://www.ibm.com/support/pages/node/7288035