VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 12, 2025· Updated Nov 12, 2025

IBM OpenPages Information Disclosure

CVE-2025-27368

Description

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond what the user is intended to view.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/OpenPagescpe-rescue2 versions
    cpe:2.3:a:ibm:openpages:9.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:openpages:9.1:*:*:*:*:*:*:*range: 9.0
    • (no CPE)range: 9.0, 9.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.