PT-2025-7428 · Ibm · Ibm Openpages With Watson

Published 2025-02-19 · Updated 2025-03-11 · CVE-2024-49355

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM OpenPages with Watson versions 8.3 through 9.0

Description The issue allows IBM OpenPages with Watson to write improperly neutralized data to server log files when the tracing is enabled per the System Tracing feature.

Recommendations For versions 8.3 and 9.0, consider disabling the System Tracing feature until a patch is available to prevent improperly neutralized data from being written to server log files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-117

CWE-116

Related Identifiers

BDU:2025-06817

CVE-2024-49355

Affected Products

Ibm Openpages With Watson

References · 8

• https://osv.dev/vulnerability/CVE-2024-49355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49355 · Security Note
• https://bdu.fstec.ru/vul/2025-06817 · Security Note
• https://ibm.com/support/pages/node/7183541 · Vendor Advisory, Patch
• https://t.me/cvenotify/111853 · Telegram Post
• https://t.me/cvenotify/114232 · Telegram Post
• https://twitter.com/CVEnew/status/1892421438725923053 · Twitter Post
• https://t.me/cvedetector/18509 · Telegram Post