CVE-2025-1837

Vendor

IBM

Product

watsonx Orchestrate Cartridge for Cloud Pak for Data

CVSS v3.1

5.4 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weakness

CWE-650

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 23
   CVE NVD 3h ago

   IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform…

   IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods.

   CVSS 5.4 CVE-2025-1837 IBM