Vulnerabilities > IBM > Openpages With Watson

DATE CVE VULNERABILITY TITLE RISK
2024-09-10 CVE-2024-27257 Unspecified vulnerability in IBM Openpages GRC Platform and Openpages With Watson
IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.
network
low complexity
ibm
4.3
2024-08-22 CVE-2024-35151 Missing Authentication for Critical Function vulnerability in IBM Openpages GRC Platform and Openpages With Watson
IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.
network
low complexity
ibm CWE-306
6.5
2024-01-19 CVE-2023-38738 Storing Passwords in a Recoverable Format vulnerability in IBM Openpages With Watson 9.0
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication.
network
low complexity
ibm CWE-257
8.1
2024-01-19 CVE-2023-40683 Improper Authorization vulnerability in IBM Openpages With Watson 9.0
IBM OpenPages with Watson 8.3 and 9.0 could allow remote attacker to bypass security restrictions, caused by insufficient authorization checks.
network
low complexity
ibm CWE-285
8.8
2021-08-31 CVE-2021-29907 Unrestricted Upload of File with Dangerous Type vulnerability in IBM Openpages With Watson
IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system.
network
low complexity
ibm CWE-434
8.8