Skip to main content

Openpages With Watson CVE-2024-49783

| EUVDEUVD-2024-54764 MEDIUM
Generation of Predictable IV with CBC Mode (CWE-329)
2025-07-08 psirt@us.ibm.com
Information Disclosure IBM Openpages With Watson
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

4
EUVD ID Assigned
Mar 16, 2026 - 04:21 euvd
EUVD-2024-54764
Analysis Generated
Mar 16, 2026 - 04:21 vuln.today
Patch released
Mar 16, 2026 - 04:21 nvd
Patch available
CVE Published
Jul 08, 2025 - 19:15 nvd
MEDIUM 5.3

DescriptionCVE.org

IBM OpenPages with Watson 8.3 and 9.0

could provide weaker than expected security in storage of encrypted data. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data, they could exploit this vulnerability to use additional cryptographic methods to possibly extract the encrypted data.

AnalysisAI

CVE-2024-49783 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management procedures. Vendor patch is available.

Technical ContextAI

Vulnerability type not specified by vendor.

RemediationAI

Apply the vendor-supplied patch immediately.

More in Openpages With Watson

View all
CVE-2021-29907 HIGH
8.8 Aug 31

IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary co
CVE-2024-49781 HIGH
7.1 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when

CVE-2024-49782 MEDIUM
6.8 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS sec
CVE-2024-35151 MEDIUM
6.5 Aug 22

IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper a
CVE-2023-43039 MEDIUM
6.1 Jul 08

IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

CVE-2024-49337 MEDIUM
5.4 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to HTML injection, caused by improper validation of us
CVE-2024-49355 MEDIUM
5.3 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enab
CVE-2024-49780 MEDIUM
5.3 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to traverse directories on the system.
CVE-2025-27367 MEDIUM
5.3 Jul 08

A security vulnerability in IBM OpenPages with Watson 8.3 and 9.0 (CVSS 5.3). Remediation should follow standard vulnera
CVE-2024-49784 MEDIUM
5.3 Jul 08

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AE
CVE-2024-35117 MEDIUM
4.4 Dec 11

IBM OpenPages with Watson 9.0 may write sensitive information, under specific configurations, in clear text to the syste
CVE-2024-49779 MEDIUM
4.3 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to bypass security restrictions, cause

Same weakness CWE-329 – Generation of Predictable IV with CBC Mode

View all
CVE-2020-5408 MEDIUM
6.5
CVE-2021-27499 MEDIUM
5.9
CVE-2024-56141 MEDIUM
5.0
CVE-2026-14969 MEDIUM
4.4
CVE-2025-2814 MEDIUM
4.0

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-49783 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy