CVE-2025-0165 — IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data SQL injection
IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted…
Published: 2025-08-30 · CVSS: 7.6 · CVSS 3.1
IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7