CVE-2024-49355
IBM OpenPages log manipulation
- State
- Published
- Severity
- 5.3 Medium
- Published
- Feb 20, 2025
- Updated
- Aug 15, 2025
- Reserved
- Oct 14, 2024
Description
IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enabled per the System Tracing feature.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N | ibm |
Weaknesses
- CWE-117 Improper Output Neutralization for Logs
Affected Products
| Product | Versions |
|---|---|
OpenPages with WatsonIBM |
|
References
- https://www.ibm.com/support/pages/node/7183541vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.