Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-4918 EUVD-2026-25133GHSA-pr8m-2c2c-5wf7

IBM Guardium Data Protection is affected by multiple vulnerabilities

Published Apr 22, 2026 · Updated Apr 30, 2026 · Assigned by ibm

Vendor: IBM Product: Guardium Data Protection

Description

IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

VendorProductAffectedFixed
IBM Guardium Data Protection 12.1.0 – ≤ 2.3.0 —

References