CVE-2025-27368CWE-497

CVE-2025-27368

Medium · published November 13, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond what the user is intended to view.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-11-13T01:15Z
Affected products (2)
ProductVersionsFixed in
ibm/openpagesall versions—
ibm/openpagesall versions—
References (1)
https://www.ibm.com/support/pages/node/7250238 · [email protected]
EPSS history
Timeline
  • 12 NOV 19:11Z
    IBM OpenPages Information Disclosure
    cvelistv5