Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-4919 EUVD-2026-25134GHSA-5qjr-q267-wc42

IBM Guardium Data Protection is affected by multiple vulnerabilities

Published Apr 22, 2026 · Updated Apr 23, 2026 · Assigned by ibm

Vendor: IBM Product: Guardium Data Protection

Description

IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

VendorProductAffectedFixed
IBM Guardium Data Protection 12.1 – ≤ 26.0.0.4 —

References