CVE-2023-27556

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Counter Fraud Management for Safer Payments 6.1.0.00, 6.2.0.00, 6.3.0.00 through 6.3.1.03, 6.4.0.00 through 6.4.2.02 and 6.5.0.00 does not properly allocate resources without limits or throttling which could allow a remote attacker to cause a denial of service. IBM X-Force ID: 249190.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

Vendor	Product	Versions
IBM	Safer Payments	6.1.0.00, 6.2.0.00, 6.5.0.00; >= 6.3.0.00, <= 6.3.1.03; >= 6.4.0.00, <= 6.4.2.02

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/249190VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6985601
https://exchange.xforce.ibmcloud.com/vulnerabilities/249190VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6985601

Timeline

Published: Apr 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-275577.5IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through 6.3.1.02, 6.4.0.00 th CVE-2023-275587.8IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquot CVE-2023-275597.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server ma CVE-2023-27567.2SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.CVE-2023-275607.5Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.CVE-2023-275617.0runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit thi CVE-2023-275626.5The n8n package 0.218.0 for Node.js allows Directory Traversal.CVE-2023-275638.8The n8n package 0.218.0 for Node.js allows Escalation of Privileges.CVE-2023-275647.5The n8n package 0.218.0 for Node.js allows Information Disclosure.CVE-2023-275667.8Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a crafted Section Offset Table or Count Info Table in an MOC3 file CVE-2023-275677.5In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel.CVE-2023-275688.8SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderSearchForm[searchText