CVE-2025-36223 in OpenPages

Riassunto

di MITRE • 12/11/2025

IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: Ibm
• Prenotare: 15/04/2025
• Divulgazione: 12/11/2025
• Moderazione: accettato
• Voce: VDB-332276
• CPE: pronto
• CWE: CWE-644 (confermato)
• CVSS: 6.1 (NVD)
• EPSS: 0.00163
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-36223
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-36223
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-36223/