Known vulnerabilities in watsonx Assistant Cartridge - page 4

Vendor: IBM Corporation
Software: watsonx Assistant Cartridge
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_assistant_cartridge:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 200
Public exploits: 16
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting watsonx Assistant Cartridge watsonx Assistant Cartridge is affected by 200 known vulnerabilities: 5 critical, 48 high, 82 medium, 65 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801		 CWE-611 Medium
No
No
 5.1.3 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 5.1.3 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-55565		 CWE-835 Medium
No
No
 5.1.3 08.01.2025 SB2025010849
SB2025010851
SB2025010853
and 45 more
#VU101972 - Security Features
CVE-2024-56326		 CWE-254 Low
No
No
 5.1.3 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101971 - Security Features
CVE-2024-56201		 CWE-254 Low
No
No
 5.1.3 27.12.2024 SB2024122789
SB2025010203
SB2025010322
and 62 more
#VU98760 - Improper input validation
CVE-2024-47764		 CWE-20 Low
No
No
 5.1.3 17.10.2024 SB2024101722
SB20241022349
SB2024103080
and 35 more
#VU98645 - Improper input validation
CVE-2024-21210		 CWE-20 Low
No
No
 5.1.3 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98646 - Improper input validation
CVE-2024-21211		 CWE-20 Low
No
No
 5.1.3 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 16 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 5.1.3 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 5.1.3 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 5.1.3 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97689 -
CVE-2024-6531		 Medium
No
No
 5.1.3 25.09.2024 SB2024092513
SB2024121139
SB2025031910
and 7 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 5.1.3 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 5.1.3 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU96903 - Deserialization of Untrusted Data
CVE-2024-39705		 CWE-502 High
No
No
 5.1.1 05.09.2024 SB20240905107
SB20240905108
SB2024100965
and 5 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 5.1.3 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU96019 - Resource exhaustion
CVE-2024-38808		 CWE-400 Medium
No
No
 5.1.3 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 5.1.3 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU84540 - Unchecked Return Value
CVE-2023-6918		 CWE-252 Low
No
No
 5.1.3 19.12.2023 SB2023121906
SB2023121910
SB2023121911
and 63 more
#VU84538 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-6004		 CWE-78 Medium
No
No
 5.1.3 19.12.2023 SB2023121905
SB2023121906
SB2023121910
and 58 more


Showing elements 61 - 80 out of 200