IBM Cloud Pak for Data System - Cyclops SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in IBM Cloud Pak for Data System - Cyclops, versions 11.3.0.2 through Interim Fix 002. This vulnerability allows remote attackers to send specially crafted SQL statements that could be used to view, add, modify, or delete information in the back-end database.

Impact

Exploitation of this vulnerability could lead to unauthorized access and manipulation of database information, including the ability to view, modify, or delete data.

Remediation

Users can upgrade to IBM Cloud Pak for Data System - Cyclops version 11.3.1.1-WS-ICPDS-CYCLOPS-fp278500 to address this vulnerability.

Added: May 26, 2026, 11:25 PM
Updated: May 26, 2026, 11:25 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
3.1
exploitability
5.2
remediation
0.0
relevance
9.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.