IBM Watsonx Orchestrate Cartridge Cloud Pak Data
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in IBM Watsonx Orchestrate Cartridge Cloud Pak Data.
By the Year
In 2026 there have been 4 vulnerabilities in IBM Watsonx Orchestrate Cartridge Cloud Pak Data with an average score of 4.7 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 4 | 4.73 |
It may take a day or so for new Watsonx Orchestrate Cartridge Cloud Pak Data vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Watsonx Orchestrate Cartridge Cloud Pak Data Security Vulnerabilities
IBM watsonx Orchestrate Cartridge (CP4D) <=5.4.2 RBAC Bypass via API
CVE-2026-2700
4.3 - Medium
- November 08, 2026
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows low-privileged users to execute administrative functions by directly invoking backend APIs.As a result, UI-level access restrictions are ineffective, as the backend fails to enforce role-based access control.
Authorization
IBM watsonx Orchestrate Cartridge for CPD auth bypass (4.8.44.8.5,5.0.05.4.2)
CVE-2026-2477
6.5 - Medium
- November 08, 2026
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce backend authorization checks, allowing lowprivileged users to directly invoke administrative API endpoints. This bypasses UIlevel access restrictions and may lead to unauthorized execution of privileged functions.
AuthZ
IBM watsonx Orchestrate AuthZ Bypass (4.8.44.8.5,5.0.05.4.2)
CVE-2025-1837
5.4 - Medium
- November 08, 2026
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods.
Trusting HTTP Permission Methods on the Server Side
IBM watsonx Orchestrate Cartridge for CP4D 4.8.4-5.4.2 Info Disclosure
CVE-2025-0166
2.7 - Low
- November 08, 2026
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sensitive source code information that should not be accessible.
Inclusion of Sensitive Information in Source Code
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for IBM Watsonx Orchestrate Cartridge Cloud Pak Data or by IBM? Click the Watch button to subscribe.
