Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Advisory: IBM OpenPages with Watson — ibm.com/support/pages/node/7183541 Clear all filters
TI-2024-32930 CVE-2024-49337 · GHSA-c348-367f-c282

IBM OpenPages HTML injection

Priority LOW 24

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to HTML injection, caused by improper validation of user-supplied input of text fields used to construct workflow email notifications.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00265 Published 2025-02-20 No fix listed CWE-80
TI-2024-32936 CVE-2024-49344 · GHSA-f6r9-68xj-457v

IBM OpenPages session fixation

Priority LOW 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages with Watson Assistant chat feature enabled the application establishes a session when a user logs in and uses chat, but the chat session is still left active after logo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00252 Published 2025-02-20 No fix listed CWE-384
TI-2024-33246 CVE-2024-49779 · GHSA-28j5-qmvp-g845

IBM OpenPages cross-site request forgery

Priority LOW 37

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to bypass security restrictions, caused by improper validation and management of authentication cookies.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00209 Published 2025-02-20 No fix listed CWE-352
TI-2024-33248 CVE-2024-49781 · GHSA-8vgf-c76r-fp2x

IBM OpenPages XML external entity injection

Priority LOW 32

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when processing XML data.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00457 Published 2025-02-20 No fix listed CWE-611
TI-2024-33247 CVE-2024-49780 · GHSA-qj8v-rq4h-7fwh

IBM OpenPages path traversal

Priority LOW 30

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to traverse directories on the system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00568 Published 2025-02-20 No fix listed CWE-22
TI-2024-33249 CVE-2024-49782 · GHSA-c5cj-hmh6-45pv

IBM OpenPages improper certificate validation

Priority LOW 36

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00372 Published 2025-02-20 No fix listed CWE-297
TI-2024-28855 CVE-2024-43196 · GHSA-jr7q-wmwf-2vf7

IBM OpenPages data manipulation

Priority LOW 20

IBM OpenPages with Watson 8.3 and 9.0 application could allow an authenticated user to manipulate data in the Questionnaires application allowing the user to spoof other users' responses.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00237 Published 2025-02-20 No fix listed CWE-296
TI-2024-32944 CVE-2024-49355 · GHSA-7m8c-9m95-h39f

IBM OpenPages log manipulation

Priority LOW 29

IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enabled per the System Tracing feature.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00281 Published 2025-02-20 No fix listed CWE-117