Vulnerabilities

IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sensitive source code…

IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sensitive source code information that should not be accessible.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

watsonx Orchestrate Cartridge for Cloud Pak for Data

CVSS v3.1

2.7 AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness

CWE-540

Exposure class

Web platform

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2025-0166 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 23
   CVE NVD 4h ago

   IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform…

   CVSS 5.4 CVE-2025-1837 IBM