Ibm Watsonx.data vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ibm Watsonx.data: 6 record(s), with affected versions and fixes.cpe:2.3:a:ibm:watsonx.data
CVE-2025-36145
Medium · 5.3
CWE-923 May 26, 2026
Multiple Vulnerabilities in watsonx.data
IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions.
CVE-2025-36335
Medium · 5.5
CWE-256 Apr 30, 2026
Vulnerabilities found
IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.
CVE-2025-36180
High · 7.5
CWE-923 Apr 30, 2026
Inadequate Pod Communication Restrictions, affects watsonx.data
IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions.
CVE-2025-36183
Low · 2.7
CWE-434 Feb 17, 2026
Privileged User File Upload Vulnerability Leading to Limited Server-Side Execution affects watsonx.data
IBM watsonx.data 2.2 through 2.2.1 IBM Lakehouse could allow a privileged user to upload malicious files that could be executed server to modify limited files or data.
CVE-2025-36140
Medium · 6.5
CWE-770 Dec 8, 2025
IBM watsonx.data Denial of Service
IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of resources without limits.
CVE-2025-36144
Medium · 5.5
CWE-532 Sep 26, 2025
IBM watsonx.data information disclosure
IBM Lakehouse (watsonx.data 2.2) stores potentially sensitive information in log files that could be read by a local user.