Common Cryptographic Architecture vulnerabilities

2 known vulnerabilities in Common Cryptographic Architecture from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Common Cryptographic Architecture: Execution with Unnecessary Privileges

  CVE-2025-13375Feb 4, 2026IBM

  IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system.

• 7.5 High severity

  Common Cryptographic Architecture: Uncontrolled Resource Consumption

  CVE-2023-47150Mar 26, 2024IBM

  IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 could allow a remote user to cause a denial of service due to incorrect data handling for certain types of AES operations. IBM X-Force ID: 270602.