OG
Product
OpenPages GRC Platform
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 12Low 1
Watch
Add OpenPages GRC Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1300 | 8.8 | Nov 1 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted… Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2024-35151 | 6.5 | Aug 22 | IBM OpenPages information disclosure Affected: 8.3 |
| CVE-2017-1679 | 5.5 | Sep 10 | IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files Affected: 7.2.0.0; 7.3.0.0; 7.4.0.0; 8.0.0.0 |
| CVE-2020-4535 | 5.4 | May 11 | IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting Affected: 8.1 |
| CVE-2017-1290 | 5.4 | Nov 1 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2017-1147 | 5.4 | Nov 1 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2016-3048 | 5.4 | Nov 1 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2016-3049 | 5.4 | Oct 24 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection Affected: 7.1; 7.2; 7.3 |
| CVE-2015-5049 | 5.4 | Jan 1 | SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.1.0.0; +1 more |
| CVE-2017-1333 | 5.3 | Nov 1 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the… Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2017-1148 | 5.3 | Nov 1 | IBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could allow a user to obtain sensitive information including private APIs that could be… Affected: 7.1.0.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0.0; 7.2.0.1; +4 more |
| CVE-2024-27257 | 4.3 | Sep 10 | IBM OpenPages information disclosure Affected: 8.3 before 8.3.0.2 |
| CVE-2020-4536 | 4.3 | May 11 | IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 8.1 |
| CVE-2016-0234 | 3.3 | Aug 30 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close… Affected: 7.1.0.0 through 7.1.0.3; 7.2.0.0 through 7.2.0.2; 7.3.0.0 |
| CVE-2015-0145 | – | Oct 3 | Cross-site request forgery (CSRF) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote… Affected: 6.2.0.0; 6.2.1.0; 6.2.1.1; 7.0.0.0; 7.1.0.0 |
| CVE-2015-0144 | – | Oct 3 | Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated… Affected: 6.2.0.0; 6.2.1.0; 6.2.1.1; 7.0.0.0; 7.1.0.0 |
| CVE-2015-0143 | – | Oct 3 | IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to obtain sensitive information by… Affected: 6.2.0.0; 6.2.1.0; 6.2.1.1; 7.0.0.0; 7.1.0.0 |
| CVE-2015-0142 | – | Oct 3 | IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to cause a denial of service… Affected: 6.2.0.0; 6.2.1.0; 6.2.1.1; 7.0.0.0; 7.1.0.0 |
| CVE-2015-0141 | – | Oct 3 | IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to modify arbitrary user filters via a… Affected: 6.2.0.0; 6.2.1.0; 6.2.1.1; 7.0.0.0; 7.1.0.0 |
| CVE-2014-8916 | – | Oct 3 | Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated… Affected: 6.2.0.0; 6.2.1.0; 6.2.1.1; 7.0.0.0; 7.1.0.0 |
| CVE-2014-3011 | – | Jun 27 | IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors Affected: 6.1.0.1 |
| CVE-2011-1381 | – | Jun 27 | Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors Affected: 6.1.0.1 |
Showing 22