IBM Guardium Data Protection 12.2 contains a vulnerability that could allow a remote authenticated attacker to obtain sensitive information. This is due to improper neutralization of special elements in an SQL command, classified as CWE-89 (SQL Injection). The vulnerability has a high severity with a CVSS score of 7.6. No specific affected versions or patch information is provided.