IBM Guardium Data Protection 12.2 contains a vulnerability that could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation. This issue is identified as CWE-79, related to cross-site scripting (XSS). The vulnerability has a high severity with a CVSS score of 8.1.