CVE-2024-37526: IBM Data Virtualization On Cloud Pak For Data

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism.

Affected products

• IBM Data Virtualization On Cloud Pak For Data: version 1.8.0 only; version 3.0.0 only; version 4.5.0 only; version 5.0.0 only
• IBM Watson Query With Cloud Pak For Data: version 2.0 only; version 2.1 only; version 2.2 only; version 4.6 only; version 4.7 only; version 4.8 only

Published 2025-01-27. Last modified 2026-06-17.