CVE-2025-36323 Overview
CVE-2025-36323 is a stored cross-site scripting (XSS) vulnerability in IBM watsonx.data intelligence versions 5.2.0, 5.2.1, 5.2.2, and 5.3.0. An authenticated user can embed arbitrary JavaScript code in the Web UI, altering the intended application functionality. Successful exploitation runs attacker-controlled script within a trusted session, potentially leading to credential disclosure. The flaw is tracked under CWE-79: Improper Neutralization of Input During Web Page Generation. Exploitation requires low-privilege authentication and user interaction, but the impact crosses a security scope boundary because injected scripts execute in other users' browsers.
Critical Impact
Authenticated attackers can inject persistent JavaScript into the watsonx.data intelligence Web UI, hijacking trusted sessions and exposing credentials of other users who view the affected content.
Affected Products
- IBM watsonx.data intelligence 5.2.0
- IBM watsonx.data intelligence 5.2.1, 5.2.2
- IBM watsonx.data intelligence 5.3.0
Discovery Timeline
- 2026-06-30 - CVE-2025-36323 published to NVD
- 2026-07-01 - Last updated in NVD database
Technical Details for CVE-2025-36323
Vulnerability Analysis
The vulnerability exists in the watsonx.data intelligence Web UI, which fails to properly neutralize user-supplied input before rendering it back to other users. An authenticated attacker with low privileges submits crafted input containing JavaScript payloads through a UI field. The application stores or reflects that input without adequate output encoding. When a second user loads the affected view, the browser executes the injected script under the origin of the watsonx.data intelligence application.
Because the injected code runs inside a trusted session, it can read session tokens, exfiltrate form data, and issue authenticated requests on behalf of the victim. The CVSS scope change reflects that the vulnerability in the server-side rendering component affects browsers of other authenticated users. IBM has published remediation guidance in the IBM Support advisory.
Root Cause
The root cause is improper neutralization of input during web page generation [CWE-79]. The Web UI does not consistently apply context-aware output encoding to fields controlled by authenticated users, allowing HTML and JavaScript to be interpreted rather than rendered as inert text.
Attack Vector
Exploitation is network-based and requires an authenticated session with low privileges plus user interaction from a victim who views the injected content. The attacker submits a payload such as an inline <script> tag or an event handler attribute inside a user-controlled field. When another user, potentially with higher privileges, opens the affected page, the payload executes and can steal cookies, session identifiers, or entered credentials.
No verified exploit code is publicly available at the time of publication. For technical details, refer to the IBM Support advisory for watsonx.data intelligence.
Detection Methods for CVE-2025-36323
Indicators of Compromise
- Web UI fields or stored records containing HTML tags such as <script>, <img onerror=...>, or javascript: URIs.
- Outbound HTTP requests from user browsers to unfamiliar domains immediately after loading watsonx.data intelligence pages.
- Unexpected session token or cookie transmission in browser network logs during normal UI navigation.
Detection Strategies
- Review application and reverse-proxy access logs for POST or PUT requests to watsonx.data intelligence endpoints containing URL-encoded script fragments.
- Deploy a Content Security Policy report-only header and monitor report-uri submissions for inline script violations.
- Scan stored watsonx.data intelligence records and metadata fields for HTML control characters and script constructs.
Monitoring Recommendations
- Enable audit logging for all authenticated write operations in watsonx.data intelligence and forward logs to a centralized SIEM.
- Alert on browser sessions that generate anomalous outbound requests shortly after user authentication.
- Track privileged user activity patterns to detect session hijacking or unexpected API calls following UI interaction.
How to Mitigate CVE-2025-36323
Immediate Actions Required
- Apply the fix identified in the IBM Support advisory for watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, and 5.3.0.
- Restrict watsonx.data intelligence access to authenticated users on trusted networks until patching completes.
- Rotate session tokens and credentials for any users who may have viewed attacker-controlled content.
Patch Information
IBM has released remediation guidance for CVE-2025-36323. Consult the IBM Support page for this advisory for the specific fixed versions and upgrade procedures for each affected release train (5.2.0, 5.2.1, 5.2.2, 5.3.0).
Workarounds
- Enforce a strict Content Security Policy that disallows inline scripts and untrusted script sources on watsonx.data intelligence hostnames.
- Limit which authenticated roles can create or edit user-facing content within the Web UI until the patch is applied.
- Educate users to avoid opening watsonx.data intelligence records shared by untrusted or unverified accounts during the exposure window.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
