CVE-2024-49790 – IBM Watson Studio on Cloud Pak for Data Cross-Site Scripting (XSS)

CVE ID : CVE-2024-49790

Published : Aug. 28, 2025, 2:15 p.m. | 28 minutes ago

Description : IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…