PT-2025-49602 · Ibm · Watsonx.Data

CVE-2025-36140 · Publicado 2025-12-08 · Atualizado 2025-12-08

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM watsonx.data versions 2.2 through 2.2.1

Description An authenticated user may be able to cause a denial of service through ingestion pods due to improper allocation of resources without limits.

Recommendations Apply updates to versions prior to 2.3 to address the issue.

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2025-36140

Produtos afetados

Watsonx.Data

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-36140 · Nota de Segurança
• https://ibm.com/support/pages/node/7253932 · Correção, Aviso do Fabricante
• https://twitter.com/CVEnew/status/1998160042747371970 · Publicação no Twitter
• https://t.me/cveNotify/145213 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-36140 · Aviso do Fabricante