CVE-2026-84244: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in IBM Guardium Data Protection

CVE-2026-84244 is a stored cross-site scripting (CWE-79) vulnerability affecting IBM Guardium Data Protection version 12.2. The vulnerability exists in the Quick Search results grid, where improper neutralization of input allows injection of malicious scripts. An unauthenticated attacker capable of influencing monitored database traffic can exploit this to execute arbitrary scripts in the context of an authenticated user's browser session.

Successful exploitation can lead to execution of malicious scripts in the browser of authenticated Guardium users, potentially compromising confidentiality by exposing sensitive information. The CVSS v3.1 score of 9.3 reflects critical severity with network attack vector, no privileges required, no user interaction needed, and high confidentiality impact. Integrity impact is low and availability is not affected.

No official patch or remediation guidance is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Guardium interface and monitor for suspicious activity related to database traffic manipulation.