CVE-2025-36139 – IBM watsonx.data cross-site scripting

CVE ID : CVE-2025-36139

Published : Sept. 18, 2025, 4:15 p.m. | 45 minutes ago

Description : IBM Lakehouse (watsonx.data 2.2) is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Severity: 5.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…