CVE-2026-84074 is a cross-site scripting vulnerability in IBM Guardium Data Protection 12.2 caused by improper neutralization of input during web page generation. An authenticated remote attacker can exploit this flaw to execute arbitrary code within the context of the affected application. The vulnerability has a CVSS 3.1 score of 8.9, indicating high severity with network attack vector, low attack complexity, required privileges, and user interaction. The impact includes full confidentiality, integrity, and partial availability compromise. No vendor advisory or patch information is available at this time.

Successful exploitation allows a remote authenticated attacker to execute arbitrary code, leading to complete compromise of confidentiality and integrity, and partial impact on availability of IBM Guardium Data Protection 12.2. This could enable unauthorized data access or manipulation within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to the affected system to trusted users and monitor for suspicious activity related to web interface interactions.