Openpages (Ibm) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2025-11-12. Vendor: Ibm.

CVEs of Openpages

• CVE-2025-36223 - CVSS 6.1 (medium), 2025-11-12: IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to…
• CVE-2025-27368 - CVSS 4.3 (medium), 2025-11-12: IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points…
• CVE-2025-33110 - CVSS 5.4 (medium), 2025-11-06: IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be…
• CVE-2025-36121 - CVSS 5.4 (medium), 2025-10-27: IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be…
• CVE-2025-36082 - CVSS 4 (medium), 2025-09-15: IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system.
• CVE-2025-2670 - CVSS 4.3 (medium), 2025-07-09: IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related…
• CVE-2024-43176 - CVSS 5.4 (medium), 2025-01-09: IBM OpenPages 9.0 could allow an authenticated user to obtain sensitive information such as configurations that should only be available to privileged users.