PT-2026-53975 · Ibm · Watsonx.Data Intelligence

Published 2026-06-30 · Updated 2026-06-30 · CVE-2025-36320

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM watsonx.data intelligence versions 5.2.0 through 5.3.0

Description An issue exists where an authenticated user can embed arbitrary JavaScript code into the Web UI. This stored cross-site scripting (XSS) allows for the alteration of intended functionality, which could potentially lead to the disclosure of credentials within a trusted session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-36320

Affected Products

Watsonx.Data Intelligence

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-36320 · Security Note
• https://twitter.com/infoflowcloud/status/2072078226088718442 · Twitter Post
• https://twitter.com/CVEnew/status/2072076797047697585 · Twitter Post
• https://ibm.com/support/pages/node/7277801 · Patch, Vendor Advisory