VulnerabilityAnalyzed

CVE-2023-28512

IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could allow an attacker with specific knowledge about the system to manipulate data due to improper input validation.

MEDIUM 5.9EPSS 0.55%

Does this matter?

Lower severity and a low EPSS score (0.55%). Track it; it rarely justifies an emergency change on its own.

Description

IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could allow an attacker with specific knowledge about the system to manipulate data due to improper input validation. IBM X-Force ID: 250396.

CVSS 3.1: 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS: 0.55% probability · 44th percentile
CISA KEV: Not listed
Weakness: CWE-472
Affected: ibm/watson cp4d data stores
Source: psirt@us.ibm.com

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/250396VDB Entry
https://www.ibm.com/support/pages/node/6965456Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/250396VDB Entry
https://www.ibm.com/support/pages/node/6965456Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.