Known vulnerabilities in watsonx.data integration

Vendor: IBM Corporation
Software: watsonx.data integration
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_data_integration:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting watsonx.data integration watsonx.data integration is affected by 19 known vulnerabilities: 4 high, 13 medium, 2 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130475 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-45022		 CWE-180 Low
No
No
 5.4 07.05.2026 SB20260507100
SB2026070812
#VU123116 - Uncontrolled Recursion
CVE-2026-0994		 CWE-674 Medium
No
No
 5.3.1 20.02.2026 SB2026022039
SB2026022040
SB2026022041
and 25 more
#VU122961 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2025-65106		 CWE-1336 High
No
No
 5.3.1 16.02.2026 SB20260216153
SB20260216156
SB2026030212
and 1 more
#VU122518 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-6985		 CWE-611 High
No
No
 5.2.2 10.02.2026 SB2026021018
SB2026021020
SB2026032324
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718		 CWE-1321 Medium
No
No
 5.3.1 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 25 more
#VU121638 - Improper Verification of Cryptographic Signature
CVE-2025-65945		 CWE-347 Medium
No
No
 5.3.1 19.01.2026 SB2026011925
SB2026011926
SB2026012034
and 14 more
#VU119999 - Resource exhaustion
CVE-2025-66506		 CWE-400 Medium
No
No
 5.3.1 16.12.2025 SB2025121628
SB2025121640
SB2025121641
and 6 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 5.3.1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 144 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 5.3.1 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 5.3.1 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU119133 - Integer overflow
CVE-2025-66030		 CWE-190 Medium
No
No
 5.3.1 04.12.2025 SB2025120419
SB2025122219
SB2026012115
and 9 more
#VU119132 - Uncontrolled Recursion
CVE-2025-66031		 CWE-674 Medium
No
No
 5.3.1 04.12.2025 SB2025120419
SB2025120930
SB20251210178
and 15 more
#VU119131 - Interpretation Conflict
CVE-2025-12816		 CWE-436 Medium
No
No
 5.3.1 04.12.2025 SB2025120419
SB2025122219
SB20260116128
and 19 more
#VU117790 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-62727		 CWE-835 Medium
No
No
 5.3.0 29.10.2025 SB2025102946
SB2025102949
SB2025102950
and 11 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 5.3.0 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU113804 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-54368		 CWE-22 High
No
No
 5.2.2 11.08.2025 SB2025081150
SB2025081155
SB2025081156
and 3 more
#VU111979 - Protection Mechanism Failure
CVE-2025-50181		 CWE-693 Low
No
No
 5.3.1 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 54 more
#VU88540 - Data Handling
CVE-2018-20225		 CWE-19 Medium
No
No
 5.2.2 15.04.2024 SB2020050805
SB2024041561
SB2024041562
and 6 more
#VU19305 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-16487		 CWE-94 High
No
No
 5.3.1 22.07.2019 SB2019020111
SB2022062806
SB2022101801
and 13 more