{"id":"CVE-2024-49353","aliases":["EUVD-2024-43722","GHSA-4qrj-7fxc-vhj8"],"status":"published","title":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data denial of service","description":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00349,"percentile":0.28835,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362"],"published":"2024-11-26T03:23:32Z","modified":"2026-06-17T07:59:45Z","products":[{"vendor":"ibm","product":"watson speech services cartridge for ibm cloud pak for data"},{"vendor":"ibm","product":"watson_assistant_for_ibm_cloud_pak_for_data"},{"vendor":"ibm","product":"watson_speech_services_cartridge_on_cloud_pak_for_data"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7177065","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49353"},{"url":"https://github.com/advisories/GHSA-4qrj-7fxc-vhj8"}],"sources":{"cve":[{"id":"CVE-2024-49353","title":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data denial of service","description":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.","status":"published","published":"2024-11-26T03:23:32.676Z","modified":"2024-11-26T15:41:18.16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:33:55.977982Z"}],"euvd":[{"id":"EUVD-2024-43722","description":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.","status":"published","published":"2024-11-26T03:23:32Z","modified":"2024-11-26T15:41:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:47.062662Z"}],"ghsa":[{"id":"GHSA-4qrj-7fxc-vhj8","title":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not...","description":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.","status":"published","published":"2024-11-26T06:31:03Z","modified":"2024-11-26T06:31:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:58:57.581457Z"}],"nvd":[{"id":"CVE-2024-49353","description":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.","status":"published","published":"2024-11-26T04:15:05.69Z","modified":"2026-06-17T07:59:45.18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:10:38.347238Z"}]}}