Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:common_cryptographic_architecture:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCommon Cryptographic Architecture (e6643a9b-d4d7-59ec-a7fb-61790b80c40b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49823 vulnerable 2026-06-08 06:50:14.741066 IBM Common Cryptographic Architecture denial of service
MEDIUM (6.5)
IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module (HSM) using a specially crafted sequence of valid requests.
Published: 2025-03-11T00:48:05.380Z
Updated: 2025-09-01T01:07:08.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41760 vulnerable 2026-06-08 06:43:55.121430 IBM Common Cryptographic Architecture information disclosure
LOW (3.7)
IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.
Published: 2025-03-11T00:49:35.514Z
Updated: 2025-09-01T01:06:28.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22340 vulnerable 2026-06-08 06:29:34.589915 IBM Common Cryptographic Architecture information disclosure
MEDIUM (6.5)
IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack.
Published: 2025-03-11T00:50:55.148Z
Updated: 2025-09-01T01:07:29.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47150 vulnerable 2026-06-08 06:14:24.089914 IBM Common Cryptographic Architecture denial of service
HIGH (7.5)
IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 could allow a remote user to cause a denial of service due to incorrect data handling for certain types of AES operations. IBM X-Force ID: 270602.
Published: 2024-03-26T14:01:26.765Z
Updated: 2026-02-04T21:16:08.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33855 vulnerable 2026-06-08 06:06:23.621640 IBM Common Cryptographic Architecture information disclosure
LOW (3.7)
Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676.
Published: 2024-03-26T14:04:37.274Z
Updated: 2024-08-05T16:12:49.907Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.