PT-2025-35358 · Ibm · Watsonx Orchestrate Cartridge For Ibm Cloud Pak For Data

Published 2025-08-30 · Updated 2025-12-18 · CVE-2025-0165

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data versions 4.8.4 through 5.2.0

Description IBM watsonx Orchestrate is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, potentially allowing them to view, add, modify, or delete information in the back-end database.

Recommendations Upgrade to version 5.2.0.1 to resolve this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-0165

Affected Products

Watsonx Orchestrate Cartridge For Ibm Cloud Pak For Data

References · 20

• https://nvd.nist.gov/vuln/detail/CVE-2025-0165 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0165 · Vendor Advisory
• https://twitter.com/freedomhack101/status/1962149382792663178 · Twitter Post
• https://t.me/cveNotify/146226 · Telegram Post
• https://twitter.com/Komodosec/status/1975261162603520279 · Twitter Post
• https://twitter.com/CCBalert/status/1962536549070885237 · Twitter Post
• https://twitter.com/cracbot/status/1963557695220523052 · Twitter Post
• https://ibm.com/support/pages/node/7243596 · Patch, Vendor Advisory
• https://t.me/pentestingnews/67316 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1961789502550098288 · Twitter Post
• https://twitter.com/rewterz/status/1962764241431404647 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1961995269568159965 · Twitter Post
• https://t.me/pentestingnews/67214 · Telegram Post
• https://twitter.com/CrowdCyber_Com/status/1962265519718908002 · Twitter Post
• https://twitter.com/dailytechonx/status/1962613935317885310 · Twitter Post