PT-2025-46693 · Ibm · Ibm Openpages

Published 2025-11-11 · Updated 2025-11-18 · CVE-2025-27368

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM OpenPages versions 9.0 through 9.1

Description IBM OpenPages versions 9.0 and 9.1 have a security issue that could lead to the disclosure of sensitive information. This is due to insufficient security measures on certain REST API endpoints used by the OpenPages user interface. An authenticated user may be able to access system metadata beyond their authorized viewing permissions. The vulnerable API endpoints allow access to information that should be restricted.

Recommendations Apply any available updates or configuration changes to strengthen the security of the affected REST API endpoints.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2025-16368

CVE-2025-27368

Affected Products

Ibm Openpages

References · 6

• https://bdu.fstec.ru/vul/2025-16368 · Security Note
• https://osv.dev/vulnerability/CVE-2025-27368 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27368 · Security Note
• https://ibm.com/support/pages/node/7250238 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1988721710548353359 · Twitter Post
• https://t.me/cveNotify/143240 · Telegram Post