VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Nov 12, 2025· Updated Jun 17, 2026

CVE-2025-27368

CVE-2025-27368

Description

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond what the user is intended to view.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/OpenPagesllm-fuzzy4 versions
    9.0, 9.1+ 3 more
    • (no CPE)range: 9.0, 9.1
    • cpe:2.3:a:ibm:openpages:9.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:openpages:9.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:openpages:9.1:*:*:*:*:*:*:*range: 9.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.