CVE-2021-29907

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-08-31 · updated 2026-06-17
Weakness: CWE-434

Description

IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. IBM X-Force ID: 207633.

Affected products

IBM OpenPages with Watson: from 8.1 before 8.1.0.2.1; from 8.2 before 8.2.0.2 — fixed in 8.1.0.2.1, 8.2.0.2

How to fix

Upgrade to a fixed version: IBM OpenPages with Watson 8.1.0.2.1, 8.2.0.2. Check the vendor advisory for mitigations.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/207633
https://www.ibm.com/support/pages/node/6483607
https://exchange.xforce.ibmcloud.com/vulnerabilities/207633
https://www.ibm.com/support/pages/node/6483607

Get alerted when CVE-2021-29907 or the next vulnerability affects your stack