CVE-2024-27257

>= 8.3 and < 8.3.0.2

IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to u

4.3MEDIUM

CVE-2024-35151

all versions

IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorizati

6.5MEDIUM

CVE-2020-4536

>= 8.0.0.0 and < 8.1.0.2

IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error messa

4.3MEDIUM

CVE-2020-4535

>= 8.0.0.0 and < 8.1.0.2

IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip

5.4MEDIUM

CVE-2017-1679

all versions

IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IB

5.5MEDIUM

CVE-2016-0234

>= 7.1.0.0 and <= 7.1.0.3

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has log

4.0MEDIUM

CVE-2017-1333

all versions

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server

5.3MEDIUM

CVE-2017-1300

all versions

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute

8.8HIGH

CVE-2017-1290

all versions

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit

5.4MEDIUM

CVE-2017-1148

all versions

IBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could allow a user to obtain sensitive in

5.3MEDIUM

CVE-2017-1147

all versions

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit

5.4MEDIUM

CVE-2016-3048

all versions

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit

5.4MEDIUM

CVE-2016-3049

all versions

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code,

5.4MEDIUM

CVE-2015-5049

all versions

SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remo

5.4MEDIUM

CVE-2015-0145

all versions

Cross-site request forgery (CSRF) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before

CVE-2015-0144

all versions

Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, a

CVE-2015-0143

all versions

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticate

CVE-2015-0142

all versions

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticate

CVE-2015-0141

all versions

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticate

CVE-2014-8916

all versions

Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, a

CVE-2014-3011

all versions

IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors.

CVE-2011-1381

all versions

Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restr