Openpages With Watson

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:openpages_with_watson:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductOpenpages With Watson (7275a2f8-162a-5637-9251-661ca48f0975)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27369 vulnerable 2026-06-08 07:14:54.848999 IBM OpenPages with Watson information disclosure
MEDIUM (4.3)
IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used for the administration of OpenPages. An authenticated user is able to obtain certain information about system configuration and internal state which is only intended for administrators of the system.
Published: 2025-07-08T18:43:15.373Z
Updated: 2025-08-24T11:22:57.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27367 vulnerable 2026-06-08 07:14:54.840795 IBM OpenPages with Watson improper input validation
MEDIUM (5.3)
IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.
Published: 2025-07-08T18:42:25.925Z
Updated: 2025-08-24T11:23:31.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1112 vulnerable 2026-06-08 07:06:36.944068 IBM OpenPages with Watson information disclosure
MEDIUM (4.3)
IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.
Published: 2025-07-09T14:33:12.453Z
Updated: 2025-08-24T11:20:03.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49784 vulnerable 2026-06-08 06:50:14.680019 IBM OpenPages with Watson information disclosure
MEDIUM (5.3)
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AES encryption and CBC mode. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data values they could exploit this weaker algorithm to use additional cryptographic methods to possibly extract the encrypted data.
Published: 2025-07-08T18:35:23.609Z
Updated: 2025-08-24T11:21:07.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49783 vulnerable 2026-06-08 06:50:14.679467 IBM OpenPages with Watson information disclosure
MEDIUM (5.3)
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data, they could exploit this vulnerability to use additional cryptographic methods to possibly extract the encrypted data.
Published: 2025-07-08T18:36:50.595Z
Updated: 2025-08-24T11:21:43.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49782 vulnerable 2026-06-08 06:50:14.678699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49781 vulnerable 2026-06-08 06:50:14.678218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49780 vulnerable 2026-06-08 06:50:14.677509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49779 vulnerable 2026-06-08 06:50:14.676842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49355 vulnerable 2026-06-08 06:50:13.606986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49344 vulnerable 2026-06-08 06:50:13.522761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49337 vulnerable 2026-06-08 06:50:13.503719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43196 vulnerable 2026-06-08 06:45:49.852106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37527 vulnerable 2026-06-08 06:39:47.792842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35117 vulnerable 2026-06-08 06:37:35.227523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27257 vulnerable 2026-06-08 06:31:28.347993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43039 vulnerable 2026-06-08 06:11:09.798611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40683 vulnerable 2026-06-08 06:11:04.220322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38738 vulnerable 2026-06-08 06:08:18.776502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29907 vulnerable 2026-06-08 05:31:27.213211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.