Known vulnerabilities in watsonx.data 2.1

Vendor: IBM Corporation
Software: watsonx.data
Version: 2.1
Software CPE: cpe:2.3:a:ibm_corporation:watsonx.data:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting watsonx.data version 2.1 watsonx.data 2.1 is affected by 24 vulnerabilities: 1 high, 14 medium, 9 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111975 - Incorrect Permission Assignment for Critical Resource
CVE-2024-29869		 CWE-732 Low
No
No
 2.2.1 26.06.2025 SB2025062649
SB2025063009
SB2025090102
and 1 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 2.2 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 2.1.3 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103688 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31879		 CWE-200 Low
No
No
 2.2 06.02.2025 SB2021042961
SB2025020665
SB2025020666
and 7 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801		 CWE-611 Medium
No
No
 2.2.1 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 2.2.1 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 2.2 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU101829 - Improper Authentication
CVE-2024-56128		 CWE-287 Medium
No
No
 2.1.1 18.12.2024 SB2024121826
SB2025041647
SB2025041651
and 12 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 2.1.1 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU100680 - Improper input validation
CVE-2024-38828		 CWE-20 Medium
No
No
 2.1.2 20.11.2024 SB2024112009
SB2025021262
SB2025040424
and 15 more
#VU100676 - Improper Authorization
CVE-2024-38827		 CWE-285 Medium
No
No
 2.1.1 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 2.2 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU98517 - Resource exhaustion
CVE-2024-8184		 CWE-400 Medium
No
No
 2.2.1 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 2.2.1 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU97712 - Incorrect Default Permissions
CVE-2024-23454		 CWE-276 Low
No
No
 2.2.1 26.09.2024 SB2024092604
SB20241108105
SB20241108106
and 14 more
#VU80741 - Improper Certificate Validation
CVE-2012-5783		 CWE-295 Medium
No
No
 2.2.1 13.09.2023 SB2023091335
SB2023091521
SB2023092013
and 20 more
#VU77628 - Improper input validation
CVE-2012-6153		 CWE-20 Medium
No
No
 2.2.1 22.06.2023 SB2023062250
SB2023092013
SB2023092037
and 15 more
#VU53336 - Improper input validation
CVE-2021-31535		 CWE-20 Low
No
No
 2.2 19.05.2021 SB2021051908
SB2021051923
SB2021052001
and 26 more
#VU19178 - Out-of-bounds write
CVE-2019-12900		 CWE-787 High
No
No
 2.1.2 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more
#VU10224 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1000007		 CWE-200 Low
No
No
 2.2 25.01.2018 SB2018012508
SB2018012509
SB2018012607
and 19 more


Showing elements 1 - 20 out of 24