CVE-2025-27367CWE-602

IBM OpenPages with Watson improper input validation

Medium · published July 8, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

IBM OpenPages with Watson 8.3 and 9.0

is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-602 · Client-Side Enforcement of Server-Side Security
Published
2025-07-08T18:42Z
EPSS history
Timeline
  • 08 JUL 18:42Z
    IBM OpenPages with Watson improper input validation
    cvelistv5