CVE-2025-27368

Name of the Vulnerable Software and Affected Versions IBM OpenPages versions 9.0 through 9.1

Description IBM OpenPages versions 9.0 and 9.1 have a security issue that could lead to the disclosure of sensitive information. This is due to insufficient security measures on certain REST API endpoints used by the OpenPages user interface. An authenticated user may be able to access system metadata beyond their authorized viewing permissions. The vulnerable API endpoints allow access to information that should be restricted.

Recommendations Apply any available updates or configuration changes to strengthen the security of the affected REST API endpoints.