Denial of Service Vulnerability in IBM WatsonX.data Product

CVE-2025-36140

What is CVE-2025-36140?

IBM's WatsonX.data versions 2.2 and 2.2.1 are susceptible to a denial of service attack. This vulnerability arises from improper resource allocation, which can be exploited by authenticated users to overuse system resources, causing service interruptions. By manipulating ingestion pods without proper limits, attackers can lead to significant operational disruptions. It's crucial for users of affected versions to apply the necessary patches to mitigate this risk.

References