Lucene search

K
IbmOpenpages With Watson

5 matches found

CVE
CVE
added 2024/08/22 11:15 a.m.71 views

CVE-2024-35151

IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.

6.5CVSS6.2AI score0.00081EPSS
CVE
CVE
added 2024/01/19 1:15 a.m.67 views

CVE-2023-40683

IBM OpenPages with Watson 8.3 and 9.0 could allow remote attacker to bypass security restrictions, caused by insufficient authorization checks. By authenticating as an OpenPages user and using non-public APIs, an attacker could exploit this vulnerability to bypass security and gain unauthorized adm...

8.8CVSS8.4AI score0.00024EPSS
CVE
CVE
added 2024/09/10 3:15 p.m.54 views

CVE-2024-27257

IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.

4.3CVSS4.5AI score0.00074EPSS
CVE
CVE
added 2024/12/11 2:15 a.m.44 views

CVE-2024-35117

IBM OpenPages with Watson 9.0 may write sensitive information, under specific configurations, in clear text to the system tracing log files that could be obtained by a privileged user.

4.4CVSS6.5AI score0.00029EPSS
CVE
CVE
added 2024/01/19 1:15 a.m.38 views

CVE-2023-38738

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is using Native authentication an attacker with access to the OpenPages database could through a series of specially crafted steps could exploit thi...

8.1CVSS7.9AI score0.00043EPSS