{"id":"CVE-2026-84244","published":"2026-10-08T20:17:37.160","lastModified":"2026-10-09T14:23:46.250","description":"IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-79"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7288035","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows unauthenticated attackers to inject malicious scripts into the Quick Search results grid, potentially leading to browser-based attacks on authenticated users.","exploitability":"Exploitation requires an attacker to influence monitored database traffic, making it moderately difficult but feasible.","blast_radius":"If exploited, the attack could impact any authenticated user viewing the Quick Search results, potentially leading to data exfiltration or session hijacking.","remediation":"Upgrade to IBM Guardium Data Protection 12.2.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["xss","web","unauthenticated","browser"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:43:24.690Z"}}