Findings

CVE-2025-36335

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.

Published Apr 30, 2026 · updated Oct 7, 2026 · ibm watsonx.data

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 30, 2026 · NIST NVD

    Detected

    IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.

  2. Oct 7, 2026 · NIST NVD

    Updated

    IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.

Affected

  • cpe ibm/watsonx.data5.2.0
  • cpe ibm/watsonx.data5.2.1
  • cpe ibm/watsonx.data5.3.0
  • cpe ibm/watsonx.data5.3.1

Sources

  • CVE.orgVulnerability recordCVE-2025-36335

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-36335

    IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.

    nvd.nist.gov

References