Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-49782 EUVD-2025-4629GHSA-c5cj-hmh6-45pv

IBM OpenPages improper certificate validation

Published Feb 20, 2025 · Updated Aug 15, 2025 · Assigned by ibm

Description

IBM OpenPages with Watson 8.3 and 9.0 

could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification delivery.

Affected products

VendorProductAffectedFixed
IBM OpenPages with Watson 8.3, 9.0 —

References