IBM Guardium Data Protection 12.2 contains an SQL Injection vulnerability (CWE-89) due to improper neutralization of special elements used in SQL commands. This flaw could be exploited by a remote authenticated attacker with high privileges to access sensitive information. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and a confidentiality impact classified as high, with no integrity impact and low availability impact.

An attacker with authenticated access and high privileges could exploit this vulnerability to retrieve sensitive information from the database. The confidentiality impact is high, meaning sensitive data could be exposed. There is no indication of integrity compromise, but availability impact is low, suggesting limited disruption to service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to trusted users with high privileges and monitor for suspicious activity related to SQL commands within the application.