| Package | Affected versions | Patched versions |
|---|---|---|
| guardium data protection | = 12.2 |
IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting in compromise of the confidentiality, integrity, and availability of the affected system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free