OG
Product
Openpages Grc Platform
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 12Low 1
Watch
Add Openpages Grc Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-35151 | 6.5 | Aug 22 | IBM OpenPages information disclosure Affected: 8.3 |
| CVE-2017-1679 | 5.5 | Sep 10 | IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files Affected: 7.2.0.0; 7.3.0.0; 7.4.0.0; 8.0.0.0 |
| CVE-2020-4535 | 5.4 | May 11 | IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting Affected: 8.0.0.0 before 8.1.0.2 |
| CVE-2017-1290 | 5.4 | Nov 1 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2017-1147 | 5.4 | Nov 1 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2016-3048 | 5.4 | Nov 1 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2016-3049 | 5.4 | Oct 24 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection Affected: 7.1; 7.2; 7.3 |
| CVE-2015-5049 | 5.4 | Jan 1 | SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.1.0.0; +1 more |
| CVE-2017-1333 | 5.3 | Nov 1 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the… Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2017-1148 | 5.3 | Nov 1 | IBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could allow a user to obtain sensitive information including private APIs that could be… Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2024-27257 | 4.3 | Sep 10 | IBM OpenPages information disclosure Affected: 8.3 before 8.3.0.2 |
| CVE-2020-4536 | 4.3 | May 11 | IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 8.0.0.0 before 8.1.0.2 |
Showing 12