CVE-2025-27369 – IBM OpenPages with Watson Information Disclosure Vulnerability

The following table lists the changes that have been made to the
CVE-2025-27369 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Jul. 08, 2025

    Action Type Old Value New Value
    Added Description IBM OpenPages with Watson 8.3 and 9.0

    is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used for the administration of OpenPages. An authenticated user is able to obtain certain information about system configuration and internal state which is only intended for administrators of the system.

    Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
    Added CWE CWE-497
    Added Reference https://www.ibm.com/support/pages/node/7239155
Share the Post:

Related Posts