Volerion logoVolerion
Volerion logoVolerion

IBM Watson Studio Cross-Site Scripting Vulnerability on Cloud Pak for Data

Vulnerability

A cross-site scripting vulnerability has been identified in IBM Watson Studio versions 4.0 through 5.2.0, running on Cloud Pak for Data. This issue allows authenticated users to inject arbitrary JavaScript into the Web UI, potentially altering functionality and leading to credential disclosure within a trusted session.

Impact

Exploitation of this vulnerability could result in cross-site scripting, allowing for the injection of malicious scripts that could be executed in the context of the user's session.

Remediation

Users are advised to upgrade to IBM Watson Studio on Cloud Pak for Data version 5.2.1. Details on this version can be found in the IBM Cloud Pak for Data documentation.

Added: Sep 25, 2025, 4:30 PM
Updated: Sep 25, 2025, 4:30 PM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
2.9
exploitability
5.0
remediation
7.7
relevance
0.6
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.