Skip to main content

Openpages With Watson EUVDEUVD-2025-20684

| CVE-2025-27367 MEDIUM
Client-Side Enforcement of Server-Side Security (CWE-602)
2025-07-08 psirt@us.ibm.com
Authentication Bypass IBM Openpages With Watson
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

4
EUVD ID Assigned
Mar 16, 2026 - 04:21 euvd
EUVD-2025-20684
Analysis Generated
Mar 16, 2026 - 04:21 vuln.today
Patch released
Mar 16, 2026 - 04:21 nvd
Patch available
CVE Published
Jul 08, 2025 - 19:15 nvd
MEDIUM 5.3

DescriptionCVE.org

IBM OpenPages with Watson 8.3 and 9.0

is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.

AnalysisAI

A security vulnerability in IBM OpenPages with Watson 8.3 and 9.0 (CVSS 5.3). Remediation should follow standard vulnerability management procedures. Vendor patch is available.

Technical ContextAI

Vulnerability type not specified by vendor. Affects IBM OpenPages with Watson 8.3 and 9.0.

RemediationAI

Apply the vendor-supplied patch immediately.

More in Openpages With Watson

View all
CVE-2021-29907 HIGH
8.8 Aug 31

IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary co
CVE-2024-49781 HIGH
7.1 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when

CVE-2024-49782 MEDIUM
6.8 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS sec
CVE-2024-35151 MEDIUM
6.5 Aug 22

IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper a
CVE-2023-43039 MEDIUM
6.1 Jul 08

IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

CVE-2024-49337 MEDIUM
5.4 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to HTML injection, caused by improper validation of us
CVE-2024-49355 MEDIUM
5.3 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enab
CVE-2024-49780 MEDIUM
5.3 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to traverse directories on the system.
CVE-2024-49783 MEDIUM
5.3 Jul 08

CVE-2024-49783 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management proce
CVE-2024-49784 MEDIUM
5.3 Jul 08

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AE
CVE-2024-35117 MEDIUM
4.4 Dec 11

IBM OpenPages with Watson 9.0 may write sensitive information, under specific configurations, in clear text to the syste
CVE-2024-49779 MEDIUM
4.3 Feb 20

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to bypass security restrictions, cause

Same weakness CWE-602 – Client-Side Enforcement of Server-Side Security

View all
CVE-2025-51682 CRITICAL POC
9.8
CVE-2025-32808 HIGH POC
7.7
CVE-2020-8162 HIGH POC
7.5
CVE-2022-3308 HIGH POC
7.4
CVE-2026-30521 MEDIUM POC
6.5
CVE-2026-30522 MEDIUM POC
6.5
CVE-2023-42787 MEDIUM POC
6.5
CVE-2022-3310 MEDIUM POC
6.5

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

EUVD-2025-20684 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy