Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:watson_knowledge_catalog_on_cloud_pak_for_data:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWatson Knowledge Catalog On Cloud Pak For Data (9d6e40b7-017c-54b7-a5da-3f734f2e4e6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28958 vulnerable 2026-06-08 06:02:36.705130 IBM Watson Knowledge Catalog CSV injection
HIGH (7)
IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 251782.
Published: 2023-07-10T01:06:17.925Z
Updated: 2024-11-12T14:21:53.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28955 vulnerable 2026-06-08 06:02:36.701352 IBM Watson Knowledge Catalog denial of service
MEDIUM (6.5)
IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 could allow an authenticated user send a specially crafted request that could cause a denial of service. IBM X-Force ID: 251704.
Published: 2023-07-10T01:09:59.829Z
Updated: 2024-10-25T19:52:13.348Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.