Vulnerability · Published Jul 8, 2025 · Assigned by ibm

CVE-2024-49784IBM OpenPages with Watson information disclosure

Medium 5.3

In plain English

A medium-severity broken cryptography in OpenPages with Watson from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.1%top 97.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AES encryption and CBC mode. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data values they could exploit this weaker algorithm to use additional cryptographic methods to possibly extract the encrypted data.

Affected products (as reported)

Vendor	Product	Versions
IBM	OpenPages with Watson	8.39.0

Weakness: CWE-327 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://www.ibm.com/support/pages/node/7239145 vendor-advisory, patch