CVE-2025-36324 is a server-side request forgery (SSRF) vulnerability affecting IBM watsonx.data intelligence versions 5.2.0, 5.2.1, 5.2.2, and 5.3.0. This vulnerability allows an authenticated attacker to induce the system to send unauthorized requests, potentially enabling network enumeration or other attacks. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, and requiring low privileges with no user interaction. The vendor has not provided an official fix or remediation level, and no exploits are currently known in the wild.

An authenticated attacker can leverage this SSRF vulnerability to send unauthorized requests from the affected system. This could lead to network reconnaissance or facilitate further attacks within the internal network. The confidentiality impact is low, with no integrity or availability impacts reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected versions to trusted users only and monitor for suspicious activity involving internal requests. Avoid exposing the affected service to untrusted networks.