Unrated severityNVD Advisory· Published Aug 30, 2025· Updated Sep 2, 2025
IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data SQL injection
CVE-2025-0165
Description
IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Affected products
2- IBM/watsonx Orchestrate Cartridge for IBM Cloud Pak for Datav5cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_ibm_cloud_pak_for_data:4.8.4:*:*:*:*:*:*:*Range: 4.8.4
- Range: 4.8.4, 4.8.5, 5.0.0 through 5.2.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.ibm.com/support/pages/node/7243596mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.