Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2p77-5qm7-42rm

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

EPSS

Процентиль: 20%
0.00063
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.6
nvd
5 месяцев назад

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

EPSS

Процентиль: 20%
0.00063
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89