What’s Vulnerable › Vulnerabilities

CVE-2025-36145: Multiple Vulnerabilities in watsonx.data

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-26 · updated 2026-07-24
• Weakness: CWE-923

Description

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions.

Affected products

• IBM watsonx.data: from 2.2.0 through 2.3.1

References

• https://www.ibm.com/support/pages/node/7272498

Get alerted when CVE-2025-36145 or the next vulnerability affects your stack