5.4
Medium
CVE-2024-49785 IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to…
Description
IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| watsonx.ai 1.1 | 1.1 → 2.0.3 | No fix stated |
| watsonx.ai on Cloud Pak for Data 4.8 | 4.8 → 5.0.3 | No fix stated |