Vulnerabilities

IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform…

IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

watsonx Orchestrate Cartridge for Cloud Pak for Data

CVSS v3.1

5.4 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weakness

CWE-650

Exposure class

Web platform

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2025-1837 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 20
   CVE NVD 2h ago

   IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sensitive source code…

   CVSS 2.7 CVE-2025-0166 IBM