PT-2025-35358 · Ibm · Watsonx Orchestrate Cartridge For Ibm Cloud Pak For Data

Published 2025-08-30 · Updated 2025-08-30 · CVE-2025-0165

Positive Technologies · (AI Summary)

CVSS v3.1

7.6

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions:

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data versions 4.8.4 through 4.8.5

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data versions 5.0.0 through 5.2.0

Description:

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data is susceptible to SQL injection. A remote attacker could potentially send crafted SQL statements to view, add, modify, or delete information within the back-end database.

Recommendations:

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data version 4.8.4: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data version 4.8.5: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data versions 5.0.0 through 5.2.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-0165

Affected Products

Watsonx Orchestrate Cartridge For Ibm Cloud Pak For Data

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-0165 · Security Note
• https://ibm.com/support/pages/node/7243596 · Patch, Vendor Advisory
• https://twitter.com/RedPacketSec/status/1961798669532795109 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1961789502550098288 · Twitter Post