PT-2025-7413 · Ibm · Ibm Openpages With Watson

Published 2025-02-19 · Updated 2025-03-11 · CVE-2024-43196

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM OpenPages with Watson versions 8.3 through 9.0

Description The issue allows an authenticated user to manipulate data in the Questionnaires application, enabling them to spoof other users' responses.

Recommendations For versions 8.3 and 9.0, consider restricting access to the Questionnaires application until a patch is available. As a temporary workaround, consider disabling the functionality that allows users to manipulate data in the Questionnaires application. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-296

Related Identifiers

BDU:2025-06816

CVE-2024-43196

Affected Products

Ibm Openpages With Watson

References · 8

• https://osv.dev/vulnerability/CVE-2024-43196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43196 · Security Note
• https://bdu.fstec.ru/vul/2025-06816 · Security Note
• https://ibm.com/support/pages/node/7183541 · Vendor Advisory, Patch
• https://t.me/cvenotify/111852 · Telegram Post
• https://t.me/cvenotify/114231 · Telegram Post
• https://t.me/cvedetector/18512 · Telegram Post
• https://twitter.com/CVEnew/status/1892428181300302282 · Twitter Post