Known vulnerabilities in IBM Watson Machine Learning Accelerator

Vendor: IBM Corporation
Software: IBM Watson Machine Learning Accelerator
Software CPE: cpe:2.3:a:ibm_corporation:ibm_watson_machine_learning_accelerator:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 262
Public exploits: 14
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Watson Machine Learning Accelerator IBM Watson Machine Learning Accelerator is affected by 262 known vulnerabilities: 1 critical, 44 high, 174 medium, 43 low Critical High Medium Low

Vulnerabilities (262)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 4.8.6.1, 5.0.2.1 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 5.0.3 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU95805 - Deserialization of Untrusted Data
CVE-2024-3568		 CWE-502 High
No
No
 5.0.3 13.08.2024 SB2024081327
SB2024081330
SB2025020418
and 2 more
#VU92211 - Integer overflow
CVE-2024-22861		 CWE-190 Medium
No
No
 5.0.3 18.06.2024 SB2024061863
SB2026022016
#VU92203 - Integer overflow
CVE-2024-22860		 CWE-190 High
No
No
 5.0.3 18.06.2024 SB2024061863
SB2026022016
#VU92200 - Integer overflow
CVE-2024-22862		 CWE-190 High
No
No
 5.0.3 18.06.2024 SB2024061863
SB2026022016
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 5.0.3 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 5.0.1 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 5.0.1 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88540 - Data Handling
CVE-2018-20225		 CWE-19 Medium
No
No
 5.0.3 15.04.2024 SB2020050805
SB2024041561
SB2024041562
and 6 more
#VU86756 - Out-of-bounds write
CVE-2023-52355		 CWE-787 High
No
No
 5.0.3 23.02.2024 SB2024022317
SB20240417104
SB2024061863
and 6 more
#VU86755 - Out-of-bounds write
CVE-2023-52356		 CWE-787 High
No
No
 5.0.3 23.02.2024 SB2024022315
SB2024022316
SB2024022317
and 35 more
#VU84802 - Reachable Assertion
CVE-2021-38291		 CWE-617 Low
No
No
 5.0.3 27.12.2023 SB2021081245
SB2023122730
SB2026022016
#VU84801 - Unchecked Return Value
CVE-2021-38171		 CWE-252 High
No
No
 5.0.3 27.12.2023 SB2021060330
SB2023122730
SB2024061863
and 7 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853		 CWE-122 Medium
No
No
 5.0.3 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU75667 - Use After Free
CVE-2022-48434		 CWE-416 High
No
No
 5.0.3 02.05.2023 SB2023050236
SB2023050251
SB2023050702
and 13 more
#VU70598 - NULL Pointer Dereference
CVE-2022-3109		 CWE-476 Medium
No
No
 5.0.3 02.01.2023 SB2023010231
SB2023010234
SB2023010235
and 12 more
#VU69290 - Incorrect Authorization
CVE-2022-2989		 CWE-863 Low
No
No
 5.0.3 14.11.2022 SB2022111428
SB2022111429
SB2022111430
and 14 more
#VU69176 - Out-of-bounds write
CVE-2022-44638		 CWE-787 High
No
No
 5.0.3 09.11.2022 SB2022110943
SB2022110944
SB2022111201
and 37 more
#VU52196 - Stack-based buffer overflow
CVE-2020-35492		 CWE-121 High
No
No
 5.0.3 18.03.2021 SB2021031823
SB2021041369
SB2022051130
and 10 more


Showing elements 1 - 20 out of 262