Known vulnerabilities in watsonx Assistant Cartridge

Vendor: IBM Corporation
Software: watsonx Assistant Cartridge
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_assistant_cartridge:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 200
Public exploits: 16
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting watsonx Assistant Cartridge watsonx Assistant Cartridge is affected by 200 known vulnerabilities: 5 critical, 48 high, 82 medium, 65 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133451 - Generation of Predictable Numbers or Identifiers
CVE-2026-45673		 CWE-340 Medium
No
No
 5.4.2 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 6 more
#VU133448 - Insufficient Verification of Data Authenticity
CVE-2026-45674		 CWE-345 High
No
No
 5.4.2 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 9 more
#VU133444 - Insufficient Verification of Data Authenticity
CVE-2026-47691		 CWE-345 High
No
No
 5.4.2 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 9 more
#VU128402 - Improper Encoding or Escaping of Output
CVE-2026-34480		 CWE-116 Medium
No
No
 5.4 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 21 more
#VU128401 - Improper Encoding or Escaping of Output
CVE-2026-34479		 CWE-116 Medium
No
No
 5.4 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 20 more
#VU128400 - Improper Output Neutralization for Logs
CVE-2026-34478		 CWE-117 Medium
No
No
 5.4 28.04.2026 SB20260428217
SB2026052632
SB2026052731
and 18 more
#VU128399 - Improper Certificate Validation
CVE-2026-34477		 CWE-295 Medium
No
No
 5.4 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 21 more
#VU125339 - Out-of-bounds read
CVE-2026-39892		 CWE-125 Low
No
No
 5.4.2 08.04.2026 SB2026040897
SB20260408162
SB20260408163
and 16 more
#VU122967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-56200		 CWE-79 Low
No
No
 5.3.0 16.02.2026 SB20260216157
SB20260216158
SB2026021915
and 2 more
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718		 CWE-1321 Medium
No
No
 5.4 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 27 more
#VU121189 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-22701		 CWE-367 Low
No
No
 5.4 13.01.2026 SB2026011333
SB2026012349
SB2026012350
and 14 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 5.4 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 38 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 5.4 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 101 more
#VU120207 - Resource exhaustion
CVE-2025-68390		 CWE-400 Low
No
No
 5.4 19.12.2025 SB2025121524
SB2026041730
SB2026062332
#VU114392 - Improper Handling of Unexpected Data Type
CVE-2025-7339		 CWE-241 Low
No
No
 5.3.0 22.08.2025 SB2025082222
SB2025091525
SB2025091621
and 18 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 5.4 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU113085 - Interpretation Conflict
CVE-2024-56339		 CWE-436 Medium
No
No
 5.3.0 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more
#VU113074 - Stack-based buffer overflow
CVE-2025-36097		 CWE-121 High
No
No
 5.3.0 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 5.3.0 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 5.3.0 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more


Showing elements 1 - 20 out of 200