PT-2025-8703 · Ibm · Ibm Cloud Pak For Data

Published 2025-02-26 · Updated 2025-08-08 · CVE-2025-0719

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Data versions 4.0.0 through 4.8.5 IBM Cloud Pak for Data version 5.0.0

Description The issue allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session.

Recommendations For IBM Cloud Pak for Data versions 4.0.0 through 4.8.5, update to a version that includes the fix for this issue. For IBM Cloud Pak for Data version 5.0.0, update to a version that includes the fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-0719

Affected Products

Ibm Cloud Pak For Data

References · 6

• https://ibm.com/support/pages/node/7184173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0719 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0719 · Vendor Advisory
• https://t.me/cveNotify/131504 · Telegram Post
• https://twitter.com/CVEnew/status/1894867673487679700 · Twitter Post
• https://twitter.com/gothburz/status/1895123876817838527 · Twitter Post