CVE-2023-28958

ALTO 7.8CVE-2023-28958 · Published 10/07/2023 · updated 17/06/2026

En resumen

CVE-2023-28958 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a watson knowledge catalog on cloud pak for data (ibm).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.50%, mayor que el 43.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
watson knowledge catalog on cloud pak for data ibm	`= 4.0`	No fix yet

Description

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 251782.

References

exchange.xforce.ibmcloud.com/vulnerabilities/251782 · VDB Entry
ibm.com/support/pages/node/7009747 · Patch

Más vulnerabilidades de watson knowledge catalog on cloud pak for data

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free