Show filters
22 Total Results
Displaying 1-10 of 22
Sort by:
Attacker Value
Unknown
CVE-2024-27257
Disclosure Date: September 10, 2024 (last updated September 17, 2024)
IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.
0
Attacker Value
Unknown
CVE-2024-35151
Disclosure Date: August 22, 2024 (last updated August 24, 2024)
IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.
0
Attacker Value
Unknown
CVE-2020-4535
Disclosure Date: May 10, 2021 (last updated February 22, 2025)
IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182906.
0
Attacker Value
Unknown
CVE-2020-4536
Disclosure Date: May 10, 2021 (last updated February 22, 2025)
IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182907.
0
Attacker Value
Unknown
CVE-2017-1679
Disclosure Date: September 10, 2018 (last updated November 27, 2024)
IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001.
0
Attacker Value
Unknown
CVE-2016-0234
Disclosure Date: August 30, 2018 (last updated November 27, 2024)
IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close their browser. IBM X-Force ID: 110303.
0
Attacker Value
Unknown
CVE-2017-1148
Disclosure Date: November 01, 2017 (last updated November 26, 2024)
IBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could allow a user to obtain sensitive information including private APIs that could be used in further attacks against the system. IBM X-Force ID: 122201.
0
Attacker Value
Unknown
CVE-2017-1333
Disclosure Date: November 01, 2017 (last updated November 26, 2024)
IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241.
0
Attacker Value
Unknown
CVE-2017-1300
Disclosure Date: November 01, 2017 (last updated November 26, 2024)
IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 125162.
0
Attacker Value
Unknown
CVE-2016-3048
Disclosure Date: November 01, 2017 (last updated November 26, 2024)
IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114711.
0
