Advisories · Technology

IBM OpenPages with Watson.

Every CVE that names IBM OpenPages with Watson among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-1112 CVE record

CVSS 4.3 Medium

IBM OpenPages with Watson information disclosure
- IBM OpenPages with Watson
- CWE-282
Not analysed yet 9 Jul 2025
CVE-2025-27369 CVE record

CVSS 4.3 Medium

IBM OpenPages with Watson information disclosure
- IBM OpenPages with Watson
- Information disclosure
Not analysed yet 8 Jul 2025
CVE-2025-27367 CVE record

CVSS 5.3 Medium

IBM OpenPages with Watson improper input validation
- IBM OpenPages with Watson
- CWE-602
Not analysed yet 8 Jul 2025
CVE-2024-49783 CVE record

CVSS 5.3 Medium

IBM OpenPages with Watson information disclosure
- IBM OpenPages with Watson
- CWE-329
Not analysed yet 8 Jul 2025
CVE-2024-49784 CVE record

CVSS 5.3 Medium

IBM OpenPages with Watson information disclosure
- IBM OpenPages with Watson
- Weak cryptography or TLS
Not analysed yet 8 Jul 2025
CVE-2023-43039 CVE record

CVSS 6.1 Medium

IBM OpenPages with Watson cross-site scripting
- IBM OpenPages with Watson
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2024-49337 CVE record

CVSS 5.4 Medium

IBM OpenPages HTML injection
- IBM OpenPages with Watson
- Cross-site scripting (XSS)
Not analysed yet 20 Feb 2025
CVE-2024-49344 CVE record

CVSS 4.3 Medium

IBM OpenPages session fixation
- IBM OpenPages with Watson
- Authentication bypass
Not analysed yet 20 Feb 2025
CVE-2024-49779 CVE record

CVSS 4.3 Medium

IBM OpenPages cross-site request forgery
- IBM OpenPages with Watson
- Cross-site request forgery (CSRF)
Not analysed yet 20 Feb 2025
CVE-2024-49781 CVE record

CVSS 7.1 High

IBM OpenPages XML external entity injection
- IBM OpenPages with Watson
- XML external entities (XXE)
Not analysed yet 20 Feb 2025
CVE-2024-49780 CVE record

CVSS 5.3 Medium

IBM OpenPages path traversal
- IBM OpenPages with Watson
- Path traversal
Not analysed yet 20 Feb 2025
CVE-2024-49782 CVE record

CVSS 6.8 Medium

IBM OpenPages improper certificate validation
- IBM OpenPages with Watson
- Weak cryptography or TLS
Not analysed yet 20 Feb 2025
CVE-2024-43196 CVE record

CVSS 4.3 Medium

IBM OpenPages data manipulation
- IBM OpenPages with Watson
- CWE-296
Not analysed yet 20 Feb 2025
CVE-2024-49355 CVE record

CVSS 5.3 Medium

IBM OpenPages log manipulation
- IBM OpenPages with Watson
- Other injection
Not analysed yet 20 Feb 2025
CVE-2024-37527 CVE record

CVSS 5.4 Medium

IBM OpenPages with Watson cross-site scripting
- IBM OpenPages with Watson
- Cross-site scripting (XSS)
Not analysed yet 27 Jan 2025
CVE-2024-35117 CVE record

CVSS 4.4 Medium

IBM OpenPages with Watson information disclosure
- IBM OpenPages with Watson
- Information disclosure
Not analysed yet 11 Dec 2024
CVE-2024-35151 CVE record

CVSS 6.5 Medium

IBM OpenPages information disclosure
- IBM OpenPages with Watson
- Authentication bypass
Not analysed yet 22 Aug 2024
CVE-2023-40683 CVE record

CVSS 8.8 High

IBM OpenPages with Watson privilege escalation
- IBM OpenPages with Watson
- Broken access control
Not analysed yet 19 Jan 2024
CVE-2023-38738 CVE record

CVSS 6.8 Medium

IBM OpenPages with Watson information disclosure
- IBM OpenPages with Watson
- CWE-257
Not analysed yet 19 Jan 2024
CVE-2021-29907 CVE record

CVSS 8.8 High

IBM OpenPages with Watson: IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file…
- IBM OpenPages with Watson
Not analysed yet 31 Aug 2021