IBM Big SQL vulnerabilities

2 CVEs affecting IBM Big SQL, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-35160, published 2024-11-23.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-22353, published 2022-03-14. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules…
• CVE-2024-35160, published 2024-11-23. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to…