CVE-2025-2670 IBM OpenPages information disclosure
Authenticated users can access sensitive workflow configuration and internal state via insecure REST endpoints in IBM OpenPages.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-2670?
CVE-2025-2670 is a medium-severity vulnerability in IBM OpenPages, published on 9 Jul 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related to workflow feature of OpenPages. An authenticated user is able to obtain certain information about Workflow related configuration and internal state.
Weakness: CWE-497
Which versions are affected by CVE-2025-2670?
It affects 1 product.
Products include Ibm Openpages.
How do I fix CVE-2025-2670?
No fix has been published for CVE-2025-2670 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-2670 being exploited?
There is no known exploitation of CVE-2025-2670 in the wild and no public exploit code.
Other vulnerabilities in IBM OpenPages
- CVE-2025-36223 IBM OpenPages Host Header Injection
- CVE-2025-33110 IBM OpenPages Vulnerable to HTML Injection
- CVE-2025-36121 HTML Injection Vulnerability in a Specific URL Endpoint of the IBM OpenPages Application
- CVE-2025-27368 IBM OpenPages Information Disclosure
- CVE-2025-36082 IBM OpenPages information disclosure
Sources
Also known as GHSA-r3hf-m9v3-m56g.