Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-37527 EUVD-2024-36577GHSA-m2cc-r4gc-qq4v

IBM OpenPages with Watson cross-site scripting

Published Jan 27, 2025 · Updated Jan 27, 2025 · Assigned by ibm

Description

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

VendorProductAffectedFixed
IBM OpenPages with Watson 8.3, 9.0 —

References