CVE-2023-28512: IBM Watson CP4D Data Stores improper input validation

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-03 · updated 2026-06-17
Weakness: CWE-472

Description

IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could allow an attacker with specific knowledge about the system to manipulate data due to improper input validation. IBM X-Force ID: 250396.

Affected products

IBM Watson CP4D Data Stores: 4.6.0, 4.6.1, 4.6.2

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/250396
https://www.ibm.com/support/pages/node/6965456
https://exchange.xforce.ibmcloud.com/vulnerabilities/250396
https://www.ibm.com/support/pages/node/6965456

Get alerted when CVE-2023-28512 or the next vulnerability affects your stack