CVE-2025-36223 in OpenPages

Sumário

de MITRE • 12/11/2025

IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsável: Ibm
• Reservar: 15/04/2025
• Divulgação: 12/11/2025
• Moderação: aceite
• Entrada: VDB-332276
• CPE: pronto
• CWE: CWE-644 (confirmado)
• CVSS: 6.1 (NVD)
• EPSS: 0.00163
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-36223
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-36223
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-36223/