CVE-2023-28958: IBM Watson Knowledge Catalog On Cloud Pak For Data

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 251782.

Affected products

• IBM Watson Knowledge Catalog On Cloud Pak For Data: version 4.0 only

Published 2023-07-10. Last modified 2026-06-17.