Cross-Site Scripting Vulnerability in IBM Watson Studio on Cloud Pak for Data

CVE-2025-33116

What is CVE-2025-33116?

IBM Watson Studio, deployed within the Cloud Pak for Data platform, is susceptible to a cross-site scripting vulnerability. This issue allows an authenticated user to inject malicious JavaScript code into the Web UI, potentially compromising the integrity of user sessions and leading to unauthorized access to sensitive credentials. It is crucial for users and administrators to assess their environments and apply necessary security measures to mitigate the risks associated with this vulnerability.

References