Vulnerabilidades do Ibm Watsonx.data

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ibm Watsonx.data: 6 registro(s), com versões afetadas e correções.
cpe:2.3:a:ibm:watsonx.data

CVE-2025-36145 Média · 5.3 CWE-923 26/05/2026

Multiple Vulnerabilities in watsonx.data

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions.

CVE-2025-36335 Média · 5.5 CWE-256 30/04/2026

Vulnerabilities found

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.

CVE-2025-36180 Alta · 7.5 CWE-923 30/04/2026

Inadequate Pod Communication Restrictions, affects watsonx.data

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions.

CVE-2025-36183 Baixa · 2.7 CWE-434 17/02/2026

Privileged User File Upload Vulnerability Leading to Limited Server-Side Execution affects watsonx.data

IBM watsonx.data 2.2 through 2.2.1 IBM Lakehouse could allow a privileged user to upload malicious files that could be executed server to modify limited files or data.

CVE-2025-36140 Média · 6.5 CWE-770 08/12/2025

IBM watsonx.data Denial of Service

IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of resources without limits.

CVE-2025-36144 Média · 5.5 CWE-532 26/09/2025

IBM watsonx.data information disclosure

IBM Lakehouse (watsonx.data 2.2) stores potentially sensitive information in log files that could be read by a local user.