high7.0
CVE-2023-28958
IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection.
Impact
IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 251782.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Watson Knowledge Catalog On Cloud Pak For Data | Version 4.0 |