CVE-2022-22353
Medium
Published: 14 March 2022
Published
14 March 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.0014
34.0th percentile
Risk Priority
13
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-22353 is a medium-severity an unspecified weakness vulnerability in Ibm Cloud Pak For Data. Its CVSS base score is 6.5 (Medium).
Operationally, ranked at the 34.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-27499
Vulnerability details
IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID:…
more
220480.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
ibm
big sql
7.1.0, 7.1.1, 7.2.3 · 7.2.0 — 7.2.3
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.