Known vulnerabilities in watsonx Code Assistant On Prem

Vendor: IBM Corporation
Software: watsonx Code Assistant On Prem
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_code_assistant_on_prem:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 62
Public exploits: 6
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting watsonx Code Assistant On Prem watsonx Code Assistant On Prem is affected by 62 known vulnerabilities: 1 critical, 13 high, 35 medium, 13 low Critical High Medium Low

Vulnerabilities (62)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123613 - Server-Side Request Forgery (SSRF)
CVE-2026-25528		 CWE-918 Medium
No
No
 5.3.1 06.03.2026 SB2026030632
SB2026030633
SB2026052246
#VU123116 - Uncontrolled Recursion
CVE-2026-0994		 CWE-674 Medium
No
No
 5.3.1 20.02.2026 SB2026022039
SB2026022040
SB2026022041
and 28 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639		 CWE-754 Medium
Available
No
 5.3.1 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 25 more
#VU122150 - Uncaught Exception
CVE-2026-25128		 CWE-248 Medium
Available
No
 5.3.1 30.01.2026 SB2026013034
SB2026030312
SB2026030633
and 8 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 5.3.1 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 72 more
#VU121640 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23745		 CWE-22 Medium
Available
No
 5.3.1 19.01.2026 SB2026011930
SB20260202129
SB2026020564
and 11 more
#VU121634 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-14928		 CWE-94 High
No
No
 5.3.1 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121633 - Deserialization of Untrusted Data
CVE-2025-14930		 CWE-502 High
No
No
 5.3.1 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121632 - Deserialization of Untrusted Data
CVE-2025-14929		 CWE-502 High
No
No
 5.3.1 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121631 - Deserialization of Untrusted Data
CVE-2025-14924		 CWE-502 High
No
No
 5.3.1 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121190 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-22702		 CWE-367 Low
No
No
 5.3.1 13.01.2026 SB2026011335
SB2026011628
SB2026011629
and 8 more
#VU121189 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-22701		 CWE-367 Low
No
No
 5.3.1 13.01.2026 SB2026011333
SB2026012349
SB2026012350
and 14 more
#VU120998 - Resource exhaustion
CVE-2025-69229		 CWE-400 Medium
No
No
 5.3.1 06.01.2026 SB2026010643
SB2026012919
SB20260216150
and 10 more
#VU119400 - Memory corruption
CVE-2025-2999		 CWE-119 Medium
No
No
 5.3.1 09.12.2025 SB2025120921
SB2026030633
#VU119399 - Memory corruption
CVE-2025-2998		 CWE-119 Medium
No
No
 5.3.1 09.12.2025 SB2025120921
SB2026030633
#VU119133 - Integer overflow
CVE-2025-66030		 CWE-190 Medium
No
No
 5.3.1 04.12.2025 SB2025120419
SB2025122219
SB2026012115
and 9 more
#VU119132 - Uncontrolled Recursion
CVE-2025-66031		 CWE-674 Medium
No
No
 5.3.1 04.12.2025 SB2025120419
SB2025120930
SB20251210178
and 15 more
#VU119131 - Interpretation Conflict
CVE-2025-12816		 CWE-436 Medium
No
No
 5.3.1 04.12.2025 SB2025120419
SB2025122219
SB20260116128
and 19 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 5.4.0 patch 2 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 46 more
#VU86811 - Inefficient Regular Expression Complexity
CVE-2024-1899		 CWE-1333 Medium
No
No
 5.3.1 27.02.2024 SB2024022714
SB2024121850
SB2026030633


Showing elements 1 - 20 out of 62