Vulnerability · Published Jul 8, 2025 · Assigned by ibm

CVE-2025-27369IBM OpenPages with Watson information disclosure

Medium 4.3

In plain English

A medium-severity security flaw in OpenPages with Watson from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.3%top 82.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used for the administration of OpenPages. An authenticated user is able to obtain certain information about system configuration and internal state which is only intended for administrators of the system.

Affected products (as reported)

Vendor	Product	Versions
IBM	OpenPages with Watson	8.39.0

Weakness: CWE-497 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://www.ibm.com/support/pages/node/7239155 vendor-advisory, patch