Skip to content
Sign in
7.0 High

CVE-2023-28958 IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection

Description

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 251782.

Affected products and versions

Product Affected versions Fixed in
Watson Knowledge Catalog on Cloud Pak for Data 4.0 No fix stated

Other CVEs of Watson Knowledge Catalog on Cloud Pak for Data

The 2 CVEs of Watson Knowledge Catalog on Cloud Pak for Data →
CVE-2023-28955 IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 could allow an authenticated user send a specially crafted… 6.5 Medium
Track this CVE