Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-27367

IBM OpenPages with Watson improper input validation

Description

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM OpenPages with Watson

Default version status: unaffected

  • 8.3affected
  • 9.0affected

References