{"id":"CVE-2026-84247","published":"2026-10-08T22:17:33.987","lastModified":"2026-10-14T20:37:01.397","description":"IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwes":["CWE-22"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7288035","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A path traversal vulnerability in IBM Guardium Data Protection allows authenticated attackers to cause denial of service by manipulating file paths, potentially leading to unauthorized access to sensitive data or system resources.","exploitability":"Exploitation requires an authenticated user account with access to the Guardium interface, making it moderately difficult to achieve but not highly complex.","blast_radius":"If exploited, this vulnerability could lead to denial of service across the Guardium system and potentially allow attackers to access sensitive data or system files through path traversal.","remediation":"Upgrade to IBM Guardium Data Protection 12.3 or later to address this path traversal vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","dos","ibm"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:18:20.112Z"}}