IBM Guardium Data Protection version 12.2 contains a SQL injection vulnerability in the New Query Builder REST Processor. This flaw allows a low-privileged authenticated user to inject SQL statements via the newQueryBuilder REST endpoint. Successful exploitation could lead to unauthorized data access and compromise the confidentiality, integrity, and availability of the system. The vulnerability has a high severity rating with a CVSS score of 8.8.