Watson Assistant For Ibm Cloud Pak For Data
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:watson_assistant_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Watson Assistant For Ibm Cloud Pak For Data (77e82eab-f92e-57fd-8fad-c34bc396d369) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-49790 |
vulnerable | 2026-06-08 06:50:14.690387 |
IBM Watson Studio on Cloud Pak for Data cross-site scripting
MEDIUM (5.4)
IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-08-28T14:09:59.110Z
Updated: 2025-08-28T14:46:56.813Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49353 |
vulnerable | 2026-06-08 06:50:13.603288 |
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data denial of service
HIGH (7.5)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.
Published: 2024-11-26T03:23:32.676Z
Updated: 2024-11-26T15:41:18.160Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4428 |
vulnerable | 2026-06-08 05:13:57.156106 |
Details available
MEDIUM (5.4)
IBM Watson Assistant for IBM Cloud Pak for Data 1.0.0 through 1.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162807.
Published: 2019-12-09T22:30:23.849Z
Updated: 2024-09-17T01:30:50.479Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.