Skip to content

Known vulnerabilities in IBM OpenPages with Watson

Is your version affected?

CVE Summary Score Published
CVE-2025-1112 IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only… 4.3 Medium Jul 9, 2025
CVE-2025-27369 IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to information disclosure of sensitive information due to a… 4.3 Medium Jul 8, 2025
CVE-2025-27367 IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side… 5.3 Medium Jul 8, 2025
CVE-2024-49783 IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data 5.3 Medium Jul 8, 2025
CVE-2024-49784 IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AES… 5.3 Medium Jul 8, 2025
CVE-2023-43039 IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting 6.1 Medium Jul 8, 2025
CVE-2024-49337 IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to HTML injection, caused by improper validation of… 5.4 Medium Feb 20, 2025
CVE-2024-49344 IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages with Watson Assistant chat feature enabled the application… 4.3 Medium Feb 20, 2025
CVE-2024-49779 IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to bypass security restrictions,… 4.3 Medium Feb 20, 2025
CVE-2024-49781 IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack… 7.1 High Feb 20, 2025
CVE-2024-49780 IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to traverse directories on the system 5.3 Medium Feb 20, 2025
CVE-2024-49782 IBM OpenPages with Watson 8.3 and 9.0  could allow a remote attacker to spoof mail server identity when using SSL/TLS… 6.8 Medium Feb 20, 2025
CVE-2024-43196 IBM OpenPages with Watson 8.3 and 9.0  application could allow an authenticated user to manipulate data in the… 4.3 Medium Feb 20, 2025
CVE-2024-49355 IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is… 5.3 Medium Feb 20, 2025
CVE-2024-37527 IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting 5.4 Medium Jan 27, 2025
CVE-2024-35117 IBM OpenPages with Watson 9.0 may write sensitive information, under specific configurations, in clear text to the… 4.4 Medium Dec 11, 2024
CVE-2024-35151 IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper… 6.5 Medium Aug 22, 2024
CVE-2023-40683 IBM OpenPages with Watson 8.3 and 9.0 could allow remote attacker to bypass security restrictions, caused by… 8.8 High Jan 19, 2024
CVE-2023-38738 IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using… 6.8 Medium Jan 19, 2024
CVE-2021-29907 IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary… 8.8 High Aug 31, 2021

Other IBM products