5.4
Medium
CVE-2024-37527 IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting
Description
IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenPages with Watson | Versions not published |
Other CVEs of OpenPages with Watson
The 20 CVEs of OpenPages with Watson →
CVE-2025-1112
IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only…
4.3
Medium
CVE-2025-27369
IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to information disclosure of sensitive information due to a…
4.3
Medium
CVE-2025-27367
IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side…
5.3
Medium
CVE-2024-49783
IBM OpenPages with Watson 8.3 and 9.0
could provide weaker than expected security in storage of encrypted data
5.3
Medium