CVE-2025-33110 in OpenPages

Résumé

par MITRE • 06/11/2025

IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Ibm
• Réserver: 15/04/2025
• Divulgation: 06/11/2025
• Modérer: accepté
• Entrée: VDB-331458
• CPE: prêt
• CWE: CWE-80 (confirmé)
• CVSS: 5.4 (CNA)
• EPSS: 0.00197
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-33110
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-33110
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-33110/