CVE-2025-27368
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to weaker than expected security for certain REST endpoints used by the OpenPages user interface. An authenticated user is able to obtain certain information about system metadata for areas beyond what the user is intended to view.
Risk Assessment
Confidentiality breach — an authenticated user can access system metadata they are not authorized to view, potentially facilitating further attacks or revealing system structure information.
Recommendation
Apply available IBM OpenPages updates for versions 9.0 and 9.1. Review user permissions and restrict access to REST endpoints where possible.
Other vulnerabilities in IBM OpenPages
See all- CVE-2025-36223Medium
IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection caused by improper validation of input in HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning, or session hijacking.
- CVE-2025-33110Medium
IBM OpenPages 9.1 and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
- CVE-2025-36121Medium
IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed would be executed in the victim's Web browser within the security context of the hosting site.
Original NVD description (English source)
IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond what the user is intended to view.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS