CVE-2025-27367: falha de média gravidade em IBM OpenPages with Watson
IBM OpenPages with Watson improper input validation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
IBM OpenPages with Watson 8.3 and 9.0
is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
IBM · OpenPages with WatsonCVEs relacionadas — IBM OpenPages with Watson
No mesmo produto, das mais perigosas para as menos.
CVE-2021-29907HIGHCVE-2021-29907EPSS 1.5%CVE-2023-40683HIGHIBM OpenPages with Watson privilege escalationEPSS 0.7%CVE-2024-49780MEDIUMIBM OpenPages path traversalEPSS 0.6%CVE-2023-38738MEDIUMIBM OpenPages with Watson information disclosureEPSS 0.5%CVE-2024-49781HIGHIBM OpenPages XML external entity injectionEPSS 0.5%CVE-2024-35151MEDIUMIBM OpenPages information disclosureEPSS 0.4%