4.3
Medium
CVE-2025-36146 IBM Lakehouse (watsonx.data 2.2) could allow an authenticated user to obtain sensitive server component version…
Description
IBM Lakehouse (watsonx.data 2.2) could allow an authenticated user to obtain sensitive server component version information which could aid in further attacks against the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| watsonx.data | 2.2 | No fix stated |
Other CVEs of watsonx.data
The 8 CVEs of watsonx.data →
CVE-2025-36145
IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could…
5.4
Medium
CVE-2025-36180
IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow…
5.3
Medium
CVE-2025-36183
IBM watsonx.data 2.2 through 2.2.1 IBM Lakehouse could allow a privileged user to upload malicious files that could be…
3.8
Low
CVE-2025-36140
IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods…
6.5
Medium