Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-27367 EUVD-2025-20684GHSA-w27x-3v9h-qf78

IBM OpenPages with Watson improper input validation

Published Jul 8, 2025 · Updated Aug 24, 2025 · Assigned by ibm

Description

IBM OpenPages with Watson 8.3 and 9.0

is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.

Affected products

VendorProductAffectedFixed
IBM OpenPages with Watson 8.3, 9.0 —

References