Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:openpages_grc_platform:7.0.0.0:*:*:*:*:*:*:*

part: a version: 7.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductOpenpages Grc Platform (976bf68e-1995-5fc3-8e38-b4b0e8a5574e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5049 vulnerable 2026-06-08 05:06:48.664031 Details available
SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Published: 2016-01-01T02:00:00.000Z
Updated: 2024-08-06T06:32:32.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0145 vulnerable 2026-06-08 05:06:13.790646 Details available
Cross-site request forgery (CSRF) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2015-10-03T22:00:00.000Z
Updated: 2024-08-06T04:03:09.790Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0144 vulnerable 2026-06-08 05:06:13.790304 Details available
Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8916.
Published: 2015-10-03T22:00:00.000Z
Updated: 2024-08-06T04:03:09.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0143 vulnerable 2026-06-08 05:06:13.789956 Details available
IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to obtain sensitive information by reading error messages.
Published: 2015-10-03T22:00:00.000Z
Updated: 2024-08-06T04:03:09.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0142 vulnerable 2026-06-08 05:06:13.789616 Details available
IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to cause a denial of service (maintenance-mode transition and data-storage outage) by calling the System Administration Mode function.
Published: 2015-10-03T22:00:00.000Z
Updated: 2024-08-06T04:03:09.003Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0141 vulnerable 2026-06-08 05:06:13.789242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8916 vulnerable 2026-06-08 05:06:10.417481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.