Openpages Grc Platform (Ibm) - vulnerabilities (CVEs)
22 CVEs, 0 in the last 30 days, 60 known versions, newest CVE from 2024-09-10. Vendor: Ibm.
CVEs of Openpages Grc Platform
- CVE-2024-27257 - CVSS 4.3 (medium), 2024-09-10: IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.
- CVE-2024-35151 - CVSS 6.5 (medium), 2024-08-22: IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.
- CVE-2020-4535 - CVSS 5.4 (medium), 2021-05-11: IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
- CVE-2020-4536 - CVSS 4.3 (medium), 2021-05-11: IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…
- CVE-2017-1679 - CVSS 6.2 (medium), 2018-09-10: IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001.
- CVE-2016-0234 - CVSS 4 (medium), 2018-08-30: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but…
- CVE-2017-1148 - CVSS 5.3 (medium), 2017-11-01: IBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could allow a user to obtain sensitive information including private…
- CVE-2017-1333 - CVSS 5.3 (medium), 2017-11-01: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future…
- CVE-2017-1147 - CVSS 5.4 (medium), 2017-11-01: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
- CVE-2017-1300 - CVSS 8.8 (high), 2017-11-01: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
- CVE-2016-3048 - CVSS 5.4 (medium), 2017-11-01: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
- CVE-2017-1290 - CVSS 5.4 (medium), 2017-11-01: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
- CVE-2016-3049 - CVSS 5.4 (medium), 2017-10-24: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be…
- CVE-2015-5049 - CVSS 5.4 (medium), 2016-01-01: SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to…
- CVE-2015-0145 - CVSS 6.8 (medium), 2015-10-03: Cross-site request forgery (CSRF) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1…
- CVE-2015-0144 - CVSS 3.5 (low), 2015-10-03: Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows…
- CVE-2015-0143 - CVSS 4 (medium), 2015-10-03: IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to obtain sensitive…
- CVE-2015-0142 - CVSS 4 (medium), 2015-10-03: IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to cause a denial of…
- CVE-2015-0141 - CVSS 4 (medium), 2015-10-03: IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to modify arbitrary…
- CVE-2014-8916 - CVSS 3.5 (low), 2015-10-03: Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows…
- CVE-2014-3011 - CVSS 5 (medium), 2014-06-27: IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors.
- CVE-2011-1381 - CVSS 6.4 (medium), 2014-06-27: Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors.
