CVE-2025-1112

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

BM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.

References

Link	Resource
https://www.ibm.com/support/pages/node/7239151	Vendor Advisory Patch

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:openpages_with_watson::::::::
	cpe:2.3:a:ibm:openpages_with_watson::::::::

OR	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

14 Jul 2025, 17:53

Type	Values Removed	Values Added
CPE		cpe:2.3:a:ibm:openpages_with_watson:::::::: cpe:2.3:o:linux:linux_kernel:-:::::::* cpe:2.3:o:microsoft:windows:-:::::::*
References	~~() https://www.ibm.com/support/pages/node/7239151 -~~	() https://www.ibm.com/support/pages/node/7239151 - Vendor Advisory, Patch
First Time		Microsoft windows Linux linux Kernel Microsoft Ibm Linux Ibm openpages With Watson

10 Jul 2025, 13:17

Type	Values Removed	Values Added
Summary		(es) IBM OpenPages con Watson 8.3 y 9.0 podría permitir que un usuario autenticado obtenga información confidencial que sólo debería estar disponible para usuarios privilegiados.