CVE-2024-35160

6.5 mediumEPSS 0.4%

Medium (6.5) in ibm. EPSS 0.4% chance of exploitation in the next 30 days.

IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-613
Published: 2024-11-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:big_sql
ibm:watson_query_with_cloud_pak_for_data

References

https://www.ibm.com/support/pages/node/7168703
https://www.ibm.com/support/pages/node/7176947

Check your stack JSON