IBM OpenPages with Watson 9.0

IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system.

Published: 2025-09-15T15:31:45.446Z
Updated: 2025-09-15T15:52:49.614Z

IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Published: 2025-11-06T20:43:16.690Z
Updated: 2025-11-06T21:11:53.167Z

IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related to workflow feature of OpenPages. An authenticated user is able to obtain certain information about Workflow related configuration and internal state.

Published: 2025-07-09T14:27:56.151Z
Updated: 2025-08-24T11:19:24.916Z

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used for the administration of OpenPages. An authenticated user is able to obtain certain information about system configuration and internal state which is only intended for administrators of the system.

Published: 2025-07-08T18:43:15.373Z
Updated: 2025-08-24T11:22:57.543Z

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.

Published: 2025-07-08T18:42:25.925Z
Updated: 2025-08-24T11:23:31.695Z