Vulnerabilities
Summary — last 7 days
New vulnerabilities5,343▲ 2,492 vs. last week
Critical / high3,000▲ 1,639 vs. last week
New active exploitation (KEV)7▲ 1 vs. last week
Unscored (no CVSS)192▲ 2 vs. last week
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 0.46% | — | IBM Watson Query With Cloud PAK FOR Data | 2/22/2025 | 6/17/2026 | IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.4, and 4.8.0 through 4.8.7 could allow unauthorized data access from a remote data source object due to improper privilege management. | |
| Analyzed | Medium (6.5) | 0.48% | — | IBM Data Virtualization ON Cloud PAK FOR DataIBM Watson Query With Cloud PAK FOR Data | 1/27/2025 | 6/17/2026 | IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism. | |
| Analyzed | Medium (6.5) | 0.36% | — | IBM BIG SQLIBM Watson Query With Cloud PAK FOR Data | 11/23/2024 | 6/17/2026 | IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration. | |
| Modified | High (7.2) | 0.65% | — | IBM Watson Query | 4/6/2022 | 6/17/2026 | IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763. |