CVE-2025-27368: falha de média gravidade em IBM OpenPages
IBM OpenPages Information Disclosure
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.2%
IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond what the user is intended to view.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
IBM · OpenPagesCVEs relacionadas — IBM OpenPages
No mesmo produto, das mais perigosas para as menos.
CVE-2024-27257MEDIUMIBM OpenPages information disclosureEPSS 0.3%CVE-2024-43176MEDIUMIBM OpenPages information disclosureEPSS 0.3%CVE-2025-2670MEDIUMIBM OpenPages information disclosureEPSS 0.3%CVE-2025-33110MEDIUMIBM OpenPages Vulnerable to HTML InjectionEPSS 0.2%CVE-2025-36223MEDIUMIBM OpenPages Host Header InjectionEPSS 0.2%CVE-2025-36121MEDIUMHTML Injection Vulnerability in a Specific URL Endpoint of the IBM OpenPages ApplicationEPSS 0.2%