CVE-2026-84244
9.3 CRITICALPublished 2026-10-08 · Updated 2026-10-09
AI risk analysis
- Summary
- The flaw allows unauthenticated attackers to inject malicious scripts into the Quick Search results grid, potentially leading to browser-based attacks on authenticated users.
- Exploitability
- Exploitation requires an attacker to influence monitored database traffic, making it moderately difficult but feasible.
- Blast radius
- If exploited, the attack could impact any authenticated user viewing the Quick Search results, potentially leading to data exfiltration or session hijacking.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to IBM Guardium Data Protection 12.2.1 or later.
xsswebunauthenticatedbrowser
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated Guardium user.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Weaknesses
CWE-79
Vendors
ibm
Products
guardium data protection
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-36468PoC
- CRITICALCVE-2026-75689
- CRITICALCVE-2026-75697
- HIGHCVE-2026-79799
- CRITICALCVE-2026-88804PoC
- HIGHCVE-2025-61682PoC
- MEDIUMCVE-2025-71419PoC
- CRITICALCVE-2026-100133
Related by shared AI tags and CWE weakness class. Browse the full archive.