CVE-2025-12530 identifies a vulnerability in IBM watsonx.data intelligence versions 5.2.2, 5.3.0, and 5.3.1 where sensitive information is transmitted in clear text. This cleartext transmission can be exploited by attackers using man-in-the-middle techniques to obtain sensitive data. The vulnerability is categorized as CWE-319. There is no vendor advisory indicating an official fix or patch availability at this time. The CVSS 3.1 base score is 5.9, with the vector indicating network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact.

The vulnerability allows an attacker with network access to intercept sensitive information transmitted in clear text by the affected versions of IBM watsonx.data intelligence. This compromises confidentiality but does not affect integrity or availability. The medium severity score reflects the need for caution but also the requirement for high attack complexity and no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should consider mitigating exposure by restricting network access to trusted parties and using secure communication channels where possible until a patch is released.