Known vulnerabilities in watsonx Assistant Cartridge - page 2

Vendor: IBM Corporation
Software: watsonx Assistant Cartridge
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_assistant_cartridge:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 200
Public exploits: 16
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting watsonx Assistant Cartridge watsonx Assistant Cartridge is affected by 200 known vulnerabilities: 5 critical, 48 high, 82 medium, 65 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118203 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-8869		 CWE-754 Medium
No
No
 5.3.0 07.11.2025 SB2025110747
SB2025110755
SB2025112220
and 24 more
#VU118198 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-54798		 CWE-59 Low
No
No
 5.3.0 07.11.2025 SB2025110743
SB2025110755
SB2025112543
and 9 more
#VU118195 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-7969		 CWE-79 Medium
No
No
 5.3.0 07.11.2025 SB2025110741
SB2025110755
SB2025112543
and 4 more
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 5.3.0 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU116130 - Improper input validation
CVE-2025-9288		 CWE-20 Medium
No
No
 5.3.0 26.09.2025 SB2025092616
SB2025092618
SB2025092620
and 17 more
#VU115828 - Resource exhaustion
CVE-2025-6493		 CWE-400 Medium
No
No
 5.3.0 18.09.2025 SB20250918111
SB20250918112
SB2025112530
and 9 more
#VU115762 - Improper input validation
CVE-2025-9287		 CWE-20 Medium
No
No
 5.3.0 18.09.2025 SB2025091827
SB2025091828
SB2025091830
and 12 more
#VU114999 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-45767		 CWE-327 High
No
No
 5.3.0 09.09.2025 SB2025090915
SB2025090916
SB2025091820
and 4 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 5.3.0 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 47 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 5.3.0 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 39 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242		 CWE-22 Medium
No
No
 5.3.0 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 5.3.0 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU111944 - Improper input validation
CVE-2025-6545		 CWE-20 Medium
No
No
 5.2.1 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 11 more
#VU111943 - Improper input validation
CVE-2025-6547		 CWE-20 Medium
No
No
 5.2.1 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 10 more
#VU111159 - Improper Protection of Alternate Path
CVE-2025-49125		 CWE-424 Medium
No
No
 5.2.1 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 35 more
#VU107995 - Improper input validation
CVE-2025-31651		 CWE-20 Medium
Available
No
 5.2.1 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 46 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 5.2.1 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 5.3.0 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 5.3.0 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 5.3.0 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more


Showing elements 21 - 40 out of 200