6.5

CVE-2025-27367

IBM OpenPages with Watson improper input validation

IBM OpenPages with Watson 8.3 and 9.0 





is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Openpages With Watson Version >= 8.3 < 8.3.0.3.2
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Ibm ≫ Openpages With Watson Version >= 9.0 < 9.0.0.5.3
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.135
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
IBM 5.3 1.6 3.6
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE-602 Client-Side Enforcement of Server-Side Security

The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

https://www.ibm.com/support/pages/node/7239155
Patch
Vendor Advisory