Openpages With Watson (Ibm) - vulnerabilities (CVEs)

25 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2025-11-06. Vendor: Ibm.

CVEs of Openpages With Watson

CVE-2025-33110 - CVSS 5.4 (medium), 2025-11-06: IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be…
CVE-2025-36082 - CVSS 4 (medium), 2025-09-15: IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system.
CVE-2025-2670 - CVSS 4.3 (medium), 2025-07-09: IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related…
CVE-2025-1112 - CVSS 4.3 (medium), 2025-07-09: IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.
CVE-2025-27369 - CVSS 4.3 (medium), 2025-07-08: IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST…
CVE-2025-27367 - CVSS 6.5 (medium), 2025-07-08: IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and…
CVE-2024-49784 - CVSS 6.5 (medium), 2025-07-08: IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AES encryption and CBC mode. If an…
CVE-2024-49783 - CVSS 6.5 (medium), 2025-07-08: IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data. If an authenticated remote attacker with…
CVE-2023-43039 - CVSS 6.1 (medium), 2025-07-08: IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2024-49344 - CVSS 4.3 (medium), 2025-02-20: IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages with Watson Assistant chat feature enabled the application establishes a session when a user logs in and…
CVE-2024-49781 - CVSS 7.1 (high), 2025-02-20: IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker…
CVE-2024-49779 - CVSS 8.8 (high), 2025-02-20: IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to bypass security restrictions, caused by improper validation and…
CVE-2024-49337 - CVSS 5.4 (medium), 2025-02-20: IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to HTML injection, caused by improper validation of user-supplied input of text fields used…
CVE-2024-49355 - CVSS 6.5 (medium), 2025-02-20: IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enabled per the System Tracing feature.
CVE-2024-49782 - CVSS 8.2 (high), 2025-02-20: IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this…
CVE-2024-49780 - CVSS 6.5 (medium), 2025-02-20: IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to traverse directories on the system. An attacker with privileges to…
CVE-2024-43196 - CVSS 4.3 (medium), 2025-02-20: IBM OpenPages with Watson 8.3 and 9.0 application could allow an authenticated user to manipulate data in the Questionnaires application allowing the user to…
CVE-2024-37527 - CVSS 5.4 (medium), 2025-01-27: IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript…
CVE-2024-43176 - CVSS 5.4 (medium), 2025-01-09: IBM OpenPages 9.0 could allow an authenticated user to obtain sensitive information such as configurations that should only be available to privileged users.
CVE-2024-35117 - CVSS 4.4 (medium), 2024-12-11: IBM OpenPages with Watson 9.0 may write sensitive information, under specific configurations, in clear text to the system tracing log files that could be…
CVE-2024-27257 - CVSS 4.3 (medium), 2024-09-10: IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.
CVE-2024-35151 - CVSS 6.5 (medium), 2024-08-22: IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.
CVE-2023-40683 - CVSS 8.8 (high), 2024-01-19: IBM OpenPages with Watson 8.3 and 9.0 could allow remote attacker to bypass security restrictions, caused by insufficient authorization checks. By…
CVE-2023-38738 - CVSS 8.1 (high), 2024-01-19: IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is…
CVE-2021-29907 - CVSS 8.8 (high), 2021-08-31: IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. IBM X-Force ID:…