High · 8.6 CVE-2022-41731 EUVD-2022-44902GHSA-7jrj-2p8r-265w

IBM Watson Knowledge Catalog on Cloud Pak SQL injection

Published Feb 6, 2023 · Updated Mar 25, 2025 · Assigned by ibm

Vendor: IBM Product: Watson Knowledge Catalog on-prem

Description

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.5.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 237402.

Affected products

Vendor	Product	Affected	Fixed
IBM	Watson Knowledge Catalog on-prem	4.5.0	—

References

https://www.ibm.com/support/pages/node/6890729 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/237402 vdb-entry