2 results (0.004 seconds)

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 could allow an authenticated user send a specially crafted request that could cause a denial of service. IBM X-Force ID: 251704. • https://exchange.xforce.ibmcloud.com/vulnerabilities/251704 https://www.ibm.com/support/pages/node/7009747 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 251782. • https://exchange.xforce.ibmcloud.com/vulnerabilities/251782 https://www.ibm.com/support/pages/node/7009747 • CWE-1236: Improper Neutralization of Formula Elements in a CSV File •