IBM Watson Assistant For IBM Cloud Pak For Data vulnerabilities

3 CVEs affecting IBM Watson Assistant For IBM Cloud Pak For Data, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-49790, published 2025-08-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-4428, published 2019-12-09. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Watson Assistant for IBM Cloud Pak for Data 1.0.0 through 1.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2024-49353, published 2024-11-26. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states,…
CVE-2024-49790, published 2025-08-28. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus…