CVE-2022-22353

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-03-14 · updated 2026-06-17

Description

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.

Affected products

IBM Big SQL on Cloud Pak for Data: from 7.2.0 through 7.2.3; 7.1.0, 7.1.1, 7.2.3

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/220480
https://www.ibm.com/support/pages/node/6563021
https://exchange.xforce.ibmcloud.com/vulnerabilities/220480
https://www.ibm.com/support/pages/node/6563021

Get alerted when CVE-2022-22353 or the next vulnerability affects your stack