VYPR
← All advisories
High severity7.6NVD Advisory· Published Aug 30, 2025· Updated Jun 17, 2026

CVE-2025-0165

CVE-2025-0165

Description

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • IBM/Watsonx Orchestrate Cartridge For Ibm Cloud Pak For Data3 versions
    cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*range: >=4.8.4,<=4.8.5
    • cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_ibm_cloud_pak_for_data:4.8.4:*:*:*:*:*:*:*range: 4.8.4
    • (no CPE)range: 4.8.4, 4.8.5, and 5.0.0 through 5.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.