IT

Tracker / CVE-2024-49781

CVE-2024-49781

High 7.1

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected products and versions

ibm openpages_with_watson · 8.3 → 8.3.0.3
ibm openpages_with_watson · 9.0 → 9.0.0.5

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References