IBM watsonx.data Intelligence CVE-2025-36323

Exploitation requires an authenticated session with at least low-privilege access to IBM watsonx.data Intelligence (confirmed by PR:L in the provided CVSS vector - anonymous exploitation is not possible). A victim user with higher-privilege access must actively load the page containing the injected payload (UI:R - passive drive-by exploitation is not sufficient). The attacker must have write access to a Web UI field whose content is subsequently rendered for other users. Exploitation is bounded by: mandatory authentication for the attacker, mandatory active interaction from a victim user, and access to the specific watsonx.data Intelligence Web UI. API-only deployments or environments where low-privilege users cannot persist content viewable by others are not exploitable.

The CVSS 5.4 Medium score accurately reflects the constrained attack surface: exploitation requires a pre-existing authenticated session (PR:L) and victim interaction (UI:R), preventing anonymous or fully automated exploitation. The scope change elevates real-world risk above what the base score suggests in enterprise environments - a malicious insider or compromised low-privilege account can target administrators or data engineers, potentially escalating access through stolen credentials. No EPSS data was provided; absent KEV listing and no known POC, opportunistic mass exploitation is unlikely. The primary realistic threat is insider threat or compromised low-privilege credential pivot in an enterprise data environment. UI:R is a genuine limiting factor for broad exploitation campaigns.

An authenticated attacker with low-privilege access to the watsonx.data Intelligence Web UI injects a malicious JavaScript payload into a UI field that persists and is rendered for other users - such as a data catalog annotation or query label. When a higher-privileged administrator or data engineer views the affected page, the script silently exfiltrates their session token to an attacker-controlled server, enabling account takeover without further interaction.