CVE-2025-36324 is a server-side request forgery (SSRF) vulnerability in IBM watsonx.data intelligence versions 5.2.0, 5.2.1, 5.2.2, and 5.3.0. An authenticated attacker could exploit this vulnerability to send unauthorized requests from the system, potentially enabling network enumeration or other attack vectors. The vulnerability is classified under CWE-918 and has a CVSS 3.1 base score of 4.3 (medium severity). There is no vendor advisory or patch currently available, and the product is not a cloud service, so remediation depends on IBM's future updates.

An authenticated attacker can leverage this SSRF vulnerability to make unauthorized requests from the affected system. This may allow the attacker to enumerate internal networks or facilitate further attacks. The confidentiality impact is low, with no integrity or availability impacts reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, monitor IBM's advisories for updates. Limit access to the affected versions to trusted users to reduce risk until a patch is released.