CVE-2025-27368

EPSS 0.03%
Veröffentlicht 12.11.2025 19:11:10
Zuletzt bearbeitet 18.11.2025 19:12:32
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond what the user is intended to view.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

Diese Information steht angemeldeten Benutzern zur Verfügung.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Openpages Version9.0.0

Ibm ≫ Openpages Version9.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.093

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@us.ibm.com	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

https://www.ibm.com/support/pages/node/7250238

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-27368

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-27368

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27368

EUVD