Skip to main content

Openpages With Watson CVE-2024-43196

MEDIUM
Improper Following of a Certificate's Chain of Trust (CWE-296)
2025-02-20 psirt@us.ibm.com
4.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 18:27 vuln.today
CVE Published
Feb 20, 2025 - 04:15 nvd
MEDIUM 4.3

DescriptionCVE.org

IBM OpenPages with Watson 8.3 and 9.0

application could allow an authenticated user to manipulate data in the Questionnaires application allowing the user to spoof other users' responses.

AnalysisAI

IBM OpenPages with Watson 8.3 and 9.0 application could allow an authenticated user to manipulate data in the Questionnaires application allowing the user to spoof other users' responses. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-296. IBM OpenPages with Watson 8.3 and 9.0 application could allow an authenticated user to manipulate data in the Questionnaires application allowing the user to spoof other users' responses. Affected products include: Ibm Openpages With Watson.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2021-29907 HIGH
8.8 Aug 31

IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary co

CVE-2024-49781 HIGH
7.1 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when

CVE-2024-49782 MEDIUM
6.8 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS sec

CVE-2024-35151 MEDIUM
6.5 Aug 22

IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper a

CVE-2023-43039 MEDIUM
6.1 Jul 08

IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

CVE-2024-49337 MEDIUM
5.4 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to HTML injection, caused by improper validation of us

CVE-2024-49355 MEDIUM
5.3 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enab

CVE-2024-49780 MEDIUM
5.3 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to traverse directories on the system.

CVE-2024-49783 MEDIUM
5.3 Jul 08

CVE-2024-49783 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management proce

CVE-2025-27367 MEDIUM
5.3 Jul 08

A security vulnerability in IBM OpenPages with Watson 8.3 and 9.0 (CVSS 5.3). Remediation should follow standard vulnera

CVE-2024-49784 MEDIUM
5.3 Jul 08

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AE

CVE-2024-35117 MEDIUM
4.4 Dec 11

IBM OpenPages with Watson 9.0 may write sensitive information, under specific configurations, in clear text to the syste

Share

CVE-2024-43196 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy