5.4
Moyenne
CVE-2024-49785 IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to…
Description
IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| watsonx.ai 1.1 | 1.1 → 2.0.3 | Pas de correctif indiqué |
| watsonx.ai on Cloud Pak for Data 4.8 | 4.8 → 5.0.3 | Pas de correctif indiqué |