Skip to content

Known vulnerabilities in IBM OpenPages

Is your version affected?

CVE Summary Score Published
CVE-2025-36223 IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST… 5.4 Medium Nov 12, 2025
CVE-2025-27368 IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected… 4.3 Medium Nov 12, 2025
CVE-2025-33110 IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection 5.4 Medium Nov 6, 2025
CVE-2025-36121 IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection 5.4 Medium Oct 27, 2025
CVE-2025-36082 IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system 4.0 Medium Sep 15, 2025
CVE-2025-2670 IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected… 4.3 Medium Jul 9, 2025
CVE-2024-43176 IBM OpenPages 9.0 could allow an authenticated user to obtain sensitive information such as configurations that should… 5.4 Medium Jan 9, 2025
CVE-2024-27257 IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source… 4.3 Medium Sep 10, 2024

Other IBM products