IBM watsonx.data CVE-2025-36319

Exploitation requires a valid authenticated session with at least low-privilege access to the IBM watsonx.data intelligence platform (confirmed by PR:L in the CVSS vector). Network-level access to the HTTP service endpoint is also required (AV:N). No specific non-default configuration is implied - the flaw appears to affect the standard request-handling path. Exploitation is limited to authenticated users, which excludes unauthenticated external attackers. The impact is further constrained to temporary availability disruption with no confidentiality or integrity effects.

The CVSS 3.1 base score of 4.3 (Medium) accurately reflects a constrained threat: the attack vector is network (AV:N) and complexity is low (AC:L), but a valid authenticated session is required (PR:L), and the availability impact is rated low (A:L), consistent with the 'temporary' nature described. No EPSS score was provided in the input, so exploitation probability cannot be quantified. The vulnerability is not listed in CISA KEV, and no POC has been identified, making opportunistic mass exploitation unlikely. The primary real-world risk is insider threat or a compromised low-privilege account being used to degrade service stability. This is a low-priority item for most organizations unless watsonx.data intelligence is in a sensitive production pipeline where even brief availability disruptions have significant business impact.

An authenticated user with a valid low-privilege account logs into the IBM watsonx.data intelligence platform and submits a sequence of specially crafted HTTP requests designed to bypass or overwhelm the server's resource throttling controls. The server begins allocating resources beyond intended limits, causing temporary degradation or unavailability for other users. No public POC has been identified, meaning the precise request structure is not publicly documented.