CVE-2025-27367

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.

Score
CVSS 3.1 6.5 Medium
Status
Analyzed - psirt@us.ibm.com
Published
2025-07-08
Last modified
2025-08-24
Weaknesses
CWE-602

Affected products

References

 
 
© AVABIS GmbH privacypolicy about