CVE-2024-49353

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49353
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.

5.9 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7177065 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:watson_assistant_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*
History

15 Aug 2025, 14:33

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7177065 - () https://www.ibm.com/support/pages/node/7177065 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.9
First Time Ibm watson Assistant For Ibm Cloud Pak For Data
Ibm
CPE cpe:2.3:a:ibm:watson_assistant_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*

26 Nov 2024, 04:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-26 04:15

Updated : 2025-08-15 14:33

NVD link : CVE-2024-49353

Mitre link : CVE-2024-49353

JSON object : View

Products Affected

ibm

  • watson_assistant_for_ibm_cloud_pak_for_data
CWE

No CWE.