Known vulnerabilities in watsonx.data 2.0.1

Vendor: IBM Corporation
Software: watsonx.data
Version: 2.0.1
Software CPE: cpe:2.3:a:ibm_corporation:watsonx.data:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 24
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting watsonx.data version 2.0.1 watsonx.data 2.0.1 is affected by 24 vulnerabilities: 4 high, 14 medium, 6 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103688 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31879		 CWE-200 Low
No
No
 2.2 06.02.2025 SB2021042961
SB2025020665
SB2025020666
and 7 more
#VU99350 - Missing release of memory after effective lifetime
CVE-2024-36114		 CWE-401 Medium
No
No
 2.0.2 25.10.2024 SB2024102535
SB2024121139
SB2025012230
and 5 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 2.1 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96018 - Improper input validation
CVE-2024-38809		 CWE-20 Medium
No
No
 2.1 14.08.2024 SB2024081479
SB2024091920
SB2024100804
and 26 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 2.1 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 2.1 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 2.1 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243		 CWE-918 Medium
Public exploit available
No
 2.1 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU77716 - Improper input validation
CVE-2018-1199		 CWE-20 Medium
No
No
 2.1 27.06.2023 SB2023062703
SB2023102710
SB2021022238
and 1 more
#VU77101 - Files or Directories Accessible to External Parties
CVE-2015-5211		 CWE-552 High
No
No
 2.1 08.06.2023 SB2023060835
SB2025021137
SB2015101909
and 3 more
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027		 CWE-502 High
No
No
 2.1 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Public exploit available
No
 2.1 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU67489 - Resource exhaustion
CVE-2022-34917		 CWE-400 Medium
No
No
 2.1 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more
#VU63976 - Improper input validation
CVE-2021-22060		 CWE-20 Low
No
No
 2.1 03.06.2022 SB2022060324
SB2022060716
SB2022082436
and 9 more
#VU63084 - Improper input validation
CVE-2022-22970		 CWE-20 Medium
No
No
 2.1 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 23 more
#VU61720 - Improper input validation
CVE-2021-22096		 CWE-20 Medium
No
No
 2.1 29.03.2022 SB2021102810
SB2022032929
SB2022032930
and 15 more
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Public exploit available
No
 2.1 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU11753 - Improper Privilege Management
CVE-2018-1272		 CWE-269 Low
No
No
 2.1 11.04.2018 SB2018040804
SB2023062703
SB2023102710
and 5 more
#VU10224 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1000007		 CWE-200 Low
No
No
 2.2 25.01.2018 SB2018012508
SB2018012509
SB2018012607
and 19 more
#VU312 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2015-3192		 CWE-611 High
No
No
 2.1 15.08.2016 SB2016071232
SB2024042406
SB2025021137
and 3 more


Showing elements 1 - 20 out of 24