Lucene search
+L

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-43775

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00219EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:2 a.m.8 views

CVE-2024-49785

IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

5.4CVSS6.3AI score0.00219EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:35 a.m.24 views

Security Bulletin: IBM watsonx.ai (for IBM Cloud Pak for Data) is vulnerable to cross-site scripting

Summary IBM watsonx.ai for IBM Cloud Pak for Data is vulnerable to cross-site scripting when using unauthored, 3rd party LLM prompts in the Web UI interface of the application. IBM watsonx.ai for IBM Cloud Pak for Data has addresed the applicable vulnerability. Vulnerability Details...

5.4CVSS5.3AI score0.00219EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/01/12 2:15 a.m.19 views

CVE-2024-49785

IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

5.4CVSS0.00219EPSS
Exploits0References1
CVE
CVE
added 2025/01/12 1:10 a.m.45 views

CVE-2024-49785

CVE-2024-49785 affects IBM watsonx.ai (1.1–2.0.3) and IBM watsonx.ai on Cloud Pak for Data (4.8–5.0.3). It is a cross-site scripting vulnerability allowing an authenticated user to inject arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.3AI score0.00219EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2025/01/12 1:10 a.m.12 views

CVE-2024-49785 IBM watsonx.ai cross-site scripting

IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

5.4CVSS6.3AI score0.00219EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/12 1:10 a.m.23 views

CVE-2024-49785 IBM watsonx.ai cross-site scripting

IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

5.4CVSS0.00219EPSS
Exploits0References1
Rows per page
Query Builder