CVE-2024-49790

MEDIO 5.4CVE-2024-49790 · Published 28/08/2025 · updated 26/09/2026

In breve

CVE-2024-49790 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda watson assistant for ibm cloud pak for data (ibm).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.18%, superiore al 7.8% delle vulnerabilità.
Correzione: aggiornare a 5.2.0 o successiva.

Package	Affected versions	Patched versions
watson assistant for ibm cloud pak for data ibm	`≥ 4.0.0, < 5.2.0`	`5.2.0`

Description

IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

References

ibm.com/support/pages/node/7243389 · Vendor Advisory

Altre vulnerabilità di watson assistant for ibm cloud pak for data

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free