IBM Watsonx.data Intelligence vulnerabilities

10 CVEs affecting IBM Watsonx.data Intelligence, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36336, published 2026-06-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-36319, published 2026-06-30. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial using a specially crafted HTTP request due to improper allocation of resource…
CVE-2025-36321, published 2026-06-30. Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web…
CVE-2025-36328, published 2026-06-30. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This…
CVE-2025-36327, published 2026-06-30. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to bypass security controls and perform unauthorized actions due to client-side enforcement of sever-side…
CVE-2025-36333, published 2026-06-30. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to perform unauthorized actions due to the improper enforcement of behavioral workflow.
CVE-2025-36324, published 2026-06-30. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 s vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system,…
CVE-2025-36320, published 2026-06-30. Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI…
CVE-2025-36323, published 2026-06-30. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus…
CVE-2025-36336, published 2026-06-30. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.
CVE-2025-12530, published 2026-06-30. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. IBM watsonx.data intelligence 5.2.2, 5.3.0, 5.3.1, 5.3.1 through Patch 1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.