CVE-2025-36140
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
IBM watsonx.data versions 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of resources without limits.
Risk Assessment
An authenticated user could overload the system, causing service unavailability, which may disrupt organizational operations.
Recommendation
Apply fixes provided by IBM or restrict access to the system for authenticated users.
Other vulnerabilities in IBM watsonx.data
See all- CVE-2025-36145Medium
IBM watsonx.data versions 2.2 through 2.3.1 do not properly restrict inbound and outbound connections, which could allow an attacker to transfer or modify files without restrictions.
- CVE-2025-36180Medium
IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions.
Original NVD description (English source)
IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of resources without limits.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS