Watsonx Orchestrate Cartridge For Ibm Cloud Pak For Data
Monthly
SQL injection in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 allows remote attackers to view, add, modify, or delete back-end database contents. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H, 9.8) describes network-reachable exploitation without authentication or user interaction per the vendor vector, though real-world exposure is likely constrained because the cartridge is an add-on inside an authenticated Cloud Pak for Data platform typically deployed in private or managed environments. No public exploit identified at time of analysis and no CISA KEV entry is present; EPSS is low at 0.08% (25th percentile).
SQL injection in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 allows remote attackers to view, add, modify, or delete back-end database contents. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H, 9.8) describes network-reachable exploitation without authentication or user interaction per the vendor vector, though real-world exposure is likely constrained because the cartridge is an add-on inside an authenticated Cloud Pak for Data platform typically deployed in private or managed environments. No public exploit identified at time of analysis and no CISA KEV entry is present; EPSS is low at 0.08% (25th percentile).