CVE-2025-36333

MediumCVSS 4.3/10Last modified Sep 29, 2026

Description

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to perform unauthorized actions due to the improper enforcement of behavioral workflow.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-841

Affected software

VendorProductVersions
IBMwatsonx.data intelligence5.2.0, 5.2.1, 5.2.2, 5.3.0

References

Timeline

Published
Jun 30, 2026
Last modified
Sep 29, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-363355.5IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.CVE-2025-363365.9IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 transmits data in clear text that could allow an attacker to obtain sensitive inforCVE-2025-36344.3A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completing all the necessary CVE-2025-363484.9IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File CVE-2025-36353.5A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of CVE-2025-363514.3IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perCVE-2025-363525.4IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user tCVE-2025-363535.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a local user to cause a deCVE-2025-363547.3IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an CVE-2025-363558.5IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locCVE-2025-363569.3IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a localCVE-2025-363578.0IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker
CVE-2025-36333: Medium severity, CVSS 4.3 | Vulnix