PT-2025-49602 · Ibm · Watsonx.Data

Published 2025-12-08 · Updated 2025-12-08 · CVE-2025-36140

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM watsonx.data versions 2.2 through 2.2.1

Description An authenticated user may be able to cause a denial of service through ingestion pods due to improper allocation of resources without limits.

Recommendations Apply updates to versions prior to 2.3 to address the issue.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-36140

Affected Products

Watsonx.Data

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-36140 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36140 · Vendor Advisory
• https://ibm.com/support/pages/node/7253932 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1998160042747371970 · Twitter Post
• https://t.me/cveNotify/145213 · Telegram Post