CVE-2025-2670

4.3 mediumEPSS 0.3%

Medium (4.3) in ibm openpages. EPSS 0.3% chance of exploitation in the next 30 days.

IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related to workflow feature of OpenPages. An authenticated user is able to obtain certain information about Workflow related configuration and internal state.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-497
Published: 2025-07-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:openpages

References

https://www.ibm.com/support/pages/node/7239153

Check your stack JSON