Every CVE whose affected-product data names Ibm Openpages, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (6)
CVE-2025-33110 — CVSS 5.4 (medium): IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when…
CVE-2025-36121 — CVSS 5.4 (medium): IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when…
CVE-2025-36223 — CVSS 5.4 (medium): IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could…
CVE-2025-2670 — CVSS 4.3 (medium): IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST…
CVE-2025-27368 — CVSS 4.3 (medium): IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for…
CVE-2025-36082 — CVSS 4.0 (medium): IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system.