What’s Vulnerable › Vulnerabilities
CVE-2025-27368: IBM OpenPages Information Disclosure
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-11-12 · updated 2026-10-18
- Weakness: CWE-497
Description
IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond what the user is intended to view.
Affected products
- IBM OpenPages: 9.0.0, 9.1.0
References
Get alerted when CVE-2025-27368 or the next vulnerability affects your stack