IBM Watson CP4D Data Stores vulnerabilities

5 CVEs affecting IBM Watson CP4D Data Stores, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-40694, published 2024-05-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-27540, published 2023-07-10. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a remote attacker with information specific to the system to cause a denial of…
CVE-2023-28512, published 2024-03-03. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could allow an attacker with specific knowledge about the system to manipulate data due to improper input validation. IBM X-Force ID: 250396.
CVE-2023-27291, published 2024-03-03. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive…
CVE-2023-26282, published 2024-03-05. Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the system to modify files or data on the system. IBM X-Force ID: 248415.
CVE-2023-40694, published 2024-05-07. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Watson CP4D Data Stores 4.0.0 through 4.8.4 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 264838.