Known vulnerabilities in watsonx Assistant Cartridge - page 3

Vendor: IBM Corporation
Software: watsonx Assistant Cartridge
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_assistant_cartridge:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 200
Public exploits: 16
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting watsonx Assistant Cartridge watsonx Assistant Cartridge is affected by 200 known vulnerabilities: 5 critical, 48 high, 82 medium, 65 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111161 - Resource exhaustion
CVE-2025-48988		 CWE-400 Medium
Available
No
 5.2.1 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 40 more
#VU111137 - Out-of-bounds write
CVE-2025-1471		 CWE-787 Medium
No
No
 5.1.3 13.06.2025 SB2025061330
SB2025061331
SB2025062330
and 5 more
#VU111136 - NULL Pointer Dereference
CVE-2025-1470		 CWE-476 Low
No
No
 5.1.3 13.06.2025 SB2025061329
SB2025061331
SB2025062330
and 5 more
#VU109959 - Improper Handling of Case Sensitivity
CVE-2025-46701		 CWE-178 Low
Available
No
 5.2.1 30.05.2025 SB2025053002
SB2025061335
SB2025062313
and 22 more
#VU107996 - Error Handling
CVE-2025-31650		 CWE-388 Medium
Available
No
 5.2.1 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 38 more
#VU107638 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-1302		 CWE-94 Critical
Available
No
 5.1.3 22.04.2025 SB2025042218
SB2025042219
SB2025050906
and 8 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 5.2.1 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798		 CWE-1333 Low
No
No
 5.1.3 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379		 CWE-264 Medium
Available
No
 5.1.3 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU101344 - Integer overflow
CVE-2024-10917		 CWE-190 Low
No
No
 5.1.3 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 5.1.3 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU100600 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52304		 CWE-444 Medium
No
No
 5.1.3 19.11.2024 SB2024111901
SB2024111916
SB2024111917
and 19 more
#VU100117 - Improper input validation
CVE-2024-21534		 CWE-20 High
Available
No
 5.1.3 08.11.2024 SB2024110840
SB2024110841
SB2024111516
and 17 more
#VU99563 - Improper Verification of Cryptographic Signature
CVE-2024-48948		 CWE-347 Low
No
No
 5.1.3 31.10.2024 SB2024103162
SB2024103166
SB2024110115
and 18 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 5.1.3 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 5.1.3 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 5.1.3 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU95806 - Cleartext Storage of Sensitive Information
CVE-2024-5206		 CWE-312 Low
No
No
 5.1.3 13.08.2024 SB2024081329
SB2024081330
SB2024081334
and 10 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 5.1.3 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU88827 - Argument Injection or Modification
CVE-2024-32462		 CWE-88 Low
No
No
 5.1.3 19.04.2024 SB2024041902
SB2024041903
SB2024042944
and 29 more


Showing elements 41 - 60 out of 200