https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-36336.htmlhttps://patchthecve.com/cve/CVE-2025-36336.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 5.9: IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.https://patchthecve.com/cve/CVE-2025-36333.htmlhttps://patchthecve.com/cve/CVE-2025-36333.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 4.3: IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to perform unauthorized actions due to the improper enforcement of behavioral workflow.https://patchthecve.com/cve/CVE-2025-36328.htmlhttps://patchthecve.com/cve/CVE-2025-36328.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 4.3: IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.https://patchthecve.com/cve/CVE-2025-36327.htmlhttps://patchthecve.com/cve/CVE-2025-36327.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 6.5: IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to bypass security controls and perform unauthorized actions due to client-side enforcement of sever-side security.https://patchthecve.com/cve/CVE-2025-36324.htmlhttps://patchthecve.com/cve/CVE-2025-36324.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 4.3: IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 s vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.https://patchthecve.com/cve/CVE-2025-36323.htmlhttps://patchthecve.com/cve/CVE-2025-36323.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 5.4: IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted seshttps://patchthecve.com/cve/CVE-2025-36321.htmlhttps://patchthecve.com/cve/CVE-2025-36321.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 5.7: IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.https://patchthecve.com/cve/CVE-2025-36320.htmlhttps://patchthecve.com/cve/CVE-2025-36320.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 6.4: IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trushttps://patchthecve.com/cve/CVE-2025-36319.htmlhttps://patchthecve.com/cve/CVE-2025-36319.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 4.3: IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial using a specially crafted HTTP request due to improper allocation of resource throttling.https://patchthecve.com/cve/CVE-2025-12530.htmlhttps://patchthecve.com/cve/CVE-2025-12530.htmlTue, 29 Sep 2026 19:10:00 +0000MEDIUM 5.9: IBM watsonx.data intelligence 5.2.2, 5.3.0, 5.3.1, 5.3.1 through Patch 1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.