CVE-2025-36333CWE-841
CVE-2025-36333
Medium · published July 1, 2026
What it is
IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to perform unauthorized actions due to the improper enforcement of behavioral workflow.
The record
Technical detail
- CVSS v3.1
- 4.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00283 · 19.8th percentile
- Weakness
- CWE-841 · Improper Enforcement of Behavioral Workflow
- Published
- 2026-07-01T01:16Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| ibm/watsonx.data_intelligence | all versions | — |
References (1)
EPSS history
Timeline