CVE-2022-22353: IBM Big SQL

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.

Affected products

• IBM Big SQL: version 7.1.0 only; version 7.1.1 only; from 7.2.0, up to and including 7.2.3; version 7.2.3 only

Published 2022-03-14. Last modified 2026-06-17.