IBM Guardium Data Protection 12.0, 12.1, and 12.2 are vulnerable to multiple security flaws, including bypass business logic, directory traversal, and cross-site scripting vulnerabilities.

🚨 EUVD-2025-209557 📊 Score: 5.5/10 (CVSS v3.1) 📦 Product: Security Verify Directory (Container) 🏢 Vendor: IBM 📅 Updated: 2026-04-22 📝 IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating file type. A privileged user could upload malicious files into the syst... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209557 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25127 📊 Score: n/a 📦 Product: Guardium Key Lifecycle Manager, Guardium Key Lifecycle Manager, Guardium Key Lifecycle Manager (+3 more) 🏢 Vendor: IBM 📅 Updated: 2026-04-22 📝 IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25127 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25134 📊 Score: 4.8/10 (CVSS v3.1) 📦 Product: Guardium Data Protection 🏢 Vendor: IBM 📅 Updated: 2026-04-22 📝 IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25134 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25133 📊 Score: 5.5/10 (CVSS v3.1) 📦 Product: Guardium Data Protection 🏢 Vendor: IBM 📅 Updated: 2026-04-22 📝 IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrative user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25133 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25132 📊 Score: 4.9/10 (CVSS v3.1) 📦 Product: Guardium Data Protection 🏢 Vendor: IBM 📅 Updated: 2026-04-22 📝 IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25132 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25123 📊 Score: 4.9/10 (CVSS v3.1) 📦 Product: Guardium Data Protection, Guardium Data Protection, Guardium Data Protection 🏢 Vendor: IBM 📅 Updated: 2026-04-22 📝 IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access management control panel. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25123 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25121 📊 Score: 2.7/10 (CVSS v3.1) 📦 Product: Guardium Data Protection, Guardium Data Protection, Guardium Data Protection 🏢 Vendor: IBM 📅 Updated: 2026-04-22 📝 IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnerability in the user access control panel. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25121 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25125 📊 Score: 6.5/10 (CVSS v3.1) 📦 Product: DB2, DB2 🏢 Vendor: IBM 📅 Updated: 2026-04-22 📝 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25125 #cybersecurity #infosec #euvd #cve #vulnerability