IBM Storage Protect Server 8.2.0 contains an SQL injection vulnerability (CWE-89) that permits a remote attacker with low privileges to inject malicious SQL statements. This improper neutralization of special elements in SQL commands could lead to unauthorized data access and manipulation in the backend database. The CVSS v3.1 base score is 7.6, reflecting high severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability impacts confidentiality, integrity, and availability to varying degrees.

An attacker exploiting this vulnerability could gain unauthorized access to sensitive data stored in the backend database, potentially viewing, adding, modifying, or deleting information. This compromises the confidentiality, integrity, and availability of the affected system's data. The attack requires low privileges but no user interaction, making it a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, it is recommended to monitor IBM's security advisories for updates. Until a fix is available, consider restricting network access to the affected service and applying any recommended configuration changes from IBM to mitigate SQL injection risks.