PT-2025-7431 · Ibm · Ibm Openpages With Watson

Published 2025-02-19 · Updated 2025-03-11 · CVE-2024-49781

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM OpenPages with Watson versions 8.3 through 9.0

Description The issue is related to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memory resources.

Recommendations For versions 8.3 and 9.0, consider disabling XML data processing until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation. Avoid using vulnerable XML processing functions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2025-06813

CVE-2024-49781

Affected Products

Ibm Openpages With Watson

References · 9

• https://bdu.fstec.ru/vul/2025-06813 · Security Note
• https://osv.dev/vulnerability/CVE-2024-49781 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49781 · Security Note
• https://ibm.com/support/pages/node/7183541 · Vendor Advisory, Patch
• https://twitter.com/CVEnew/status/1892559803391651888 · Twitter Post
• https://t.me/cvedetector/18541 · Telegram Post
• https://t.me/cvenotify/111866 · Telegram Post
• https://twitter.com/cybercronai/status/1892653054442234318 · Twitter Post
• https://t.me/cvenotify/114208 · Telegram Post