IBM watsonx.data intelligence versions 5.2.2, 5.3.0, 5.3.1, and 5.3.1 through patch‑1 transmit data in clear text, which could allow an attacker to obtain sensitive information via man‑in‑the‑middle techniques. The vulnerability is classified as CWE‑319, a clear‑text transmission weakness that compromises confidentiality.

Affected systems are IBM watsonx.data intelligence from version 5.2.2 through 5.3.1 including patch‑1. IBM recommends upgrading to 5.2.2‑5.3.1‑patch15.3.1‑patch3, with detailed instructions available on IBM’s support site.

The CVSS score of 5.9 indicates moderate severity, and the EPSS score of 0.00136 (less than 1%) indicates a very low probability of exploitation. The vulnerability is not listed in CISA KEV. Exploitation requires an attacker positioned on the communication path to perform a man‑in‑the‑middle attack; no special privileges or local access are necessary. Once intercepted, the attacker can read any sensitive data being transmitted in clear text.