IBM Data Virtualization On Cloud Pak For Data vulnerabilities

2 CVEs affecting IBM Data Virtualization On Cloud Pak For Data, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-37526, published 2025-01-27.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-38971, published 2022-03-14. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.
• CVE-2024-37526, published 2025-01-27. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson…