2180 matches found
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-common
Summary IBM Watson Discovery Cartridge contains a vulnerable version of netty-common Vulnerability Details CVEID:CVE-2025-25193 DESCRIPTION: Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in dompurify-2.5.8.tgz
Summary IBM Watson Discovery Cartridge contains a vulnerable version of dompurify-2.5.8.tgz Vulnerability Details CVEID:CVE-2025-26791 DESCRIPTION: DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting mXSS. CWE:CWE-79:...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in runtime-7.22.3.tgz
Summary IBM Watson Discovery Cartridge contains a vulnerable version of runtime-7.22.3.tgz Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. When using versions of Babel prior to 7.26.10 and 8.0.0-alpha.17 to compile regular...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in http-proxy-middleware-2.0.7.tgz
Summary IBM Watson Discovery Cartridge contains a vulnerable version of http-proxy-middleware-2.0.7.tgz Vulnerability Details CVEID:CVE-2025-32997 DESCRIPTION: In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed. CWE:CWE-754: Improper...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in IBM SDK
Summary IBM Watson Discovery Cartridge contains a vulnerable version of IBM SDK Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacker to cause high confidentiality and high integrity impac...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in multer-1.4.4-lts.1.tgz
Summary IBM Watson Discovery Cartridge contains a vulnerable version of multer-1.4.4-lts.1.tgz Vulnerability Details CVEID:CVE-2025-47935 DESCRIPTION: Multer is a node.js middleware for handling multipart/form-data. Versions prior to 2.0.0 are vulnerable to a resource exhaustion and memory leak...
IBM Concert Software 安全漏洞
IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software suffers from a cross-domain resource sharing vulnerability...
MAL-2025-21314 Malicious code in generator-watson-voice-of-the-customer (npm)
The package generator-watson-voice-of-the-customer was found to contain malicious code...
Malicious code in generator-watson-social-customer-care (npm)
The package generator-watson-social-customer-care was found to contain malicious code...
Malicious code in generator-watson-text-bot (npm)
The package generator-watson-text-bot was found to contain malicious code...
MAL-2025-21311 Malicious code in generator-watson-news-intelligence (npm)
The package generator-watson-news-intelligence was found to contain malicious code...
Malicious code in generator-watson-news-intelligence (npm)
The package generator-watson-news-intelligence was found to contain malicious code...
Malicious code in generator-watson-voice-of-the-customer (npm)
The package generator-watson-voice-of-the-customer was found to contain malicious code...
MAL-2025-21313 Malicious code in generator-watson-text-bot (npm)
The package generator-watson-text-bot was found to contain malicious code...
MAL-2025-21312 Malicious code in generator-watson-social-customer-care (npm)
The package generator-watson-social-customer-care was found to contain malicious code...
Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed
Summary There are multiple vulnerabilities impacting IBM Watson Studio in Cloud Pak for Data. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2019-12900 DESCRIPTION: BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bound...
Security Bulletin: Due to the use of IBM SDK, Java Technology, IBM Watson Explorer is vulnerable to a remote attacker to cause high confidentiality and high integrity impact
Summary IBM SDK, Java Technology is used within IBM Watson Explorer CVE-2025-21587 Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacker to cause high confidentiality and high integrity...
IBM OpenPages with Watson Encryption Issue Vulnerability
IBM OpenPages with Watson is an AI-powered financial risk analytics solution from International Business Machines IBM. The platform is based on AI technology to predict risk factors and minimize risks in financial activities by integrating, automatically identifying, measuring, monitoring,...
CVE-2024-49784
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AES encryption and CBC mode. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data values...