Known vulnerabilities in watsonx Code Assistant On Prem

Vendor: IBM Corporation
Software: watsonx Code Assistant On Prem
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_code_assistant_on_prem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 61
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting watsonx Code Assistant On Prem watsonx Code Assistant On Prem is affected by 61 known vulnerabilities: 1 critical, 13 high, 35 medium, 12 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123607 - Creation of Temporary File in Directory with Insecure Permissions
CVE-2025-71176		 CWE-379 Low
No
No
 5.3.1 06.03.2026 SB2026030623
SB2026030633
SB20260507304
and 2 more
#VU123565 - Allocation of Resources Without Limits or Throttling
CVE-2025-67221		 CWE-770 Medium
No
No
 5.3.1 05.03.2026 SB2026030525
SB2026030633
#VU123562 - Asymmetric Resource Consumption (Amplification)
CVE-2025-68480		 CWE-405 Medium
No
No
 5.3.1 05.03.2026 SB2026030523
SB2026030527
SB2026030633
and 2 more
#VU123561 - Resource exhaustion
CVE-2025-55551		 CWE-400 Medium
No
No
 5.3.1 05.03.2026 SB2026030522
SB2026030633
#VU123140 - Inefficient Regular Expression Complexity
CVE-2026-26996		 CWE-1333 Medium
No
No
 5.3.1 23.02.2026 SB2026022345
SB2026030633
SB2026032328
and 31 more
#VU122099 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24842		 CWE-22 Medium
Available
No
 5.3.1 28.01.2026 SB2026012845
SB20260202129
SB2026020564
and 7 more
#VU122010 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24486		 CWE-22 High
No
No
 5.3.1 26.01.2026 SB2026012610
SB2026021226
SB2026021232
and 10 more
#VU121929 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24049		 CWE-22 Medium
Available
No
 5.3.1 22.01.2026 SB2026012210
SB2026012503
SB2026012761
and 20 more
#VU121671 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23950		 CWE-362 Medium
Available
No
 5.3.1 20.01.2026 SB2026012003
SB20260202129
SB2026020564
and 8 more
#VU121630 - Deserialization of Untrusted Data
CVE-2025-14920		 CWE-502 High
No
No
 5.3.1 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121629 - Deserialization of Untrusted Data
CVE-2025-14921		 CWE-502 High
No
No
 5.3.1 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121628 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-14927		 CWE-94 High
No
No
 5.3.1 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121627 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-14926		 CWE-94 High
No
No
 5.3.1 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121187 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-68146		 CWE-367 Low
No
No
 5.3.1 13.01.2026 SB2026011324
SB2026011325
SB2026011334
and 10 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 5.3.1 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 36 more
#VU120997 - Resource Management Errors
CVE-2025-69230		 CWE-399 Low
No
No
 5.3.1 06.01.2026 SB2026010643
SB2026030633
SB2026031147
and 4 more
#VU120996 - Resource exhaustion
CVE-2025-69228		 CWE-400 Medium
No
No
 5.3.1 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120995 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-69227		 CWE-835 Medium
No
No
 5.3.1 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120608 - Deserialization of Untrusted Data
CVE-2025-68664		 CWE-502 Critical
No
No
 5.3.1 26.12.2025 SB20251226350
SB2026022658
SB2026030633
and 1 more
#VU84474 - Reachable Assertion
CVE-2021-31294		 CWE-617 Medium
No
No
 5.3.1 15.12.2023 SB2023121802
SB2026030210
SB2026030633
and 2 more


Showing elements 1 - 20 out of 61