Known vulnerabilities in WatsonX BI Assistant

Vendor: IBM Corporation
Software: WatsonX BI Assistant
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_bi_assistant:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 25
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WatsonX BI Assistant WatsonX BI Assistant is affected by 25 known vulnerabilities: 2 high, 17 medium, 6 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121638 - Improper Verification of Cryptographic Signature
CVE-2025-65945		 CWE-347 Medium
No
No
 5.3 19.01.2026 SB2026011925
SB2026011926
SB2026012034
and 14 more
#VU119133 - Integer overflow
CVE-2025-66030		 CWE-190 Medium
No
No
 5.3 04.12.2025 SB2025120419
SB2025122219
SB2026012115
and 9 more
#VU119132 - Uncontrolled Recursion
CVE-2025-66031		 CWE-674 Medium
No
No
 5.3 04.12.2025 SB2025120419
SB2025120930
SB20251210178
and 15 more
#VU119131 - Interpretation Conflict
CVE-2025-12816		 CWE-436 Medium
No
No
 5.3 04.12.2025 SB2025120419
SB2025122219
SB20260116128
and 19 more
#VU118206 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-57319		 CWE-1321 Medium
No
No
 5.2.2 07.11.2025 SB2025110782
SB2025121603
SB2026010606
and 4 more
#VU115829 - Resource exhaustion
CVE-2025-8262		 CWE-400 Medium
No
No
 5.2.1 18.09.2025 SB20250918113
SB20250918114
SB20250918115
and 3 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 5.2.2 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU114574 - Use of Cache Containing Sensitive Information
CVE-2025-57752		 CWE-524 Medium
No
No
 5.2.2 30.08.2025 SB2025083005
SB2025101766
SB2025120245
and 7 more
#VU114573 - Improper input validation
CVE-2025-55173		 CWE-20 Low
No
No
 5.2.2 30.08.2025 SB2025083004
SB2025101766
SB2025120245
and 7 more
#VU114571 - Server-Side Request Forgery (SSRF)
CVE-2025-57822		 CWE-918 Medium
No
No
 5.2.2 30.08.2025 SB2025083002
SB2025101766
SB2025120303
and 5 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 5.2.1 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 5.3 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU111223 - Type confusion
CVE-2025-49796		 CWE-843 Medium
No
No
 5.2.1 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 84 more
#VU111222 - NULL Pointer Dereference
CVE-2025-49795		 CWE-476 Medium
No
No
 5.2.1 17.06.2025 SB2025070832
SB20250711170
SB20250711171
and 6 more
#VU111221 - Use After Free
CVE-2025-49794		 CWE-416 Medium
No
No
 5.2.1 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 65 more
#VU110253 - Protection Mechanism Failure
CVE-2025-22874		 CWE-693 Low
No
No
 5.2.2 07.06.2025 SB2025060702
SB2025061002
SB2025081114
and 16 more
#VU109922 - Missing Origin Validation in WebSockets
CVE-2025-48068		 CWE-1385 Low
No
No
 5.3 29.05.2025 SB2025052970
SB2025122227
SB2026010925
and 4 more
#VU108745 - Integer overflow
CVE-2025-29087		 CWE-190 Medium
No
No
 5.2.2 07.05.2025 SB2025050709
SB2025050710
SB2025050714
and 14 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 5.2.2 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 116 more
#VU77351 - Improper input validation
CVE-2023-29499		 CWE-20 Medium
No
No
 5.2.2 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 35 more


Showing elements 1 - 20 out of 25