CVE-2025-36319 PUBLISHED

Vulnerabilities found in Watson Data Intelligence

Assigner: ibm
Reserved: 15.04.2025 Published: 30.06.2026 Updated: 30.06.2026

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial using a specially crafted HTTP request due to improper allocation of resource throttling.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 4.3

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	Low	Integrity Impact	None
User Interaction	None	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	IBM
Product	watsonx.data intelligence
Versions	Version 5.2.0, 5.2.1, 5.2.2, 5.3.0 is affected

Solutions

Affected productFixed in releaseInstructionsIBM watsonx.data intelligence 5.2.0 - 5.3.05.3.1 https://www.ibm.com/docs/en/watsonx/wdi/2.3.x?topic=new-watsonxdata-intelligence

IBM strongly advises upgrading as soon as possible

References

https://www.ibm.com/support/pages/node/7277801

Problem Types

CWE-770 Allocation of Resources Without Limits or Throttling CWE