CVE-2025-36333 PUBLISHED

Vulnerabilities found in Watson Data Intelligence

Assigner: ibm
Reserved: 15.04.2025 Published: 30.06.2026 Updated: 01.07.2026

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to perform unauthorized actions due to the improper enforcement of behavioral workflow.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS Score: 4.3

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	Low	Integrity Impact	Low
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	IBM
Product	watsonx.data intelligence
Versions	Version 5.2.0, 5.2.1, 5.2.2, 5.3.0 is affected

Solutions

Affected productFixed in releaseInstructionsIBM watsonx.data intelligence 5.2.0 - 5.3.05.3.1 https://www.ibm.com/docs/en/watsonx/wdi/2.3.x?topic=new-watsonxdata-intelligence

IBM strongly advises upgrading as soon as possible

References

https://www.ibm.com/support/pages/node/7277801

Problem Types

CWE-841 Improper Enforcement of Behavioral Workflow CWE