IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification delivery.
2025-02-20T04:15:10.973
2025-03-11T14:19:11.780
Analyzed
CVSSv3.1: 6.8 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | openpages_with_watson | < 8.3.0.3 | Yes |
| Application | ibm | openpages_with_watson | < 9.0.0.5 | Yes |
| Operating System | linux | linux_kernel | - | No |
| Operating System | microsoft | windows | - | No |