Skip to content
Sign in
5.4 Medium

CVE-2024-49790 IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting

Description

IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
Watson Studio on Cloud Pak for Data 5.0 No fix stated
Watson Studio on Cloud Pak for Data 4.0 No fix stated

Other CVEs of Watson Studio on Cloud Pak for Data

The 2 CVEs of Watson Studio on Cloud Pak for Data →
CVE-2025-33116 IBM Watson Studio 4.0 through 5.2.0 on Cloud Pak for Data is vulnerable to cross-site scripting 4.4 Medium
Track this CVE