CVE-2025-36327CWE-602

CVE-2025-36327

Medium · published July 1, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
28.5
In the wild
Unconfirmed
What it is

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to bypass security controls and perform unauthorized actions due to client-side enforcement of sever-side security.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.5th percentile
Weakness
CWE-602 · Client-Side Enforcement of Server-Side Security
Published
2026-07-01T01:16Z
Affected products (1)
ProductVersionsFixed in
ibm/watsonx.data_intelligenceall versions—
References (1)
https://www.ibm.com/support/pages/node/7277801 · [email protected]
EPSS history
Timeline
  • 30 JUN 20:17Z
    Vulnerabilities found in Watson Data Intelligence
    cvelistv5