CVE-2025-36082 IBM OpenPages information disclosure
Local users can read cached web pages from IBM OpenPages, potentially exposing sensitive information stored in the browser cache.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-36082?
CVE-2025-36082 is a medium-severity vulnerability in IBM OpenPages, published on 15 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system.
Weakness: CWE-525
Which versions are affected by CVE-2025-36082?
It affects 1 product.
Products include Ibm Openpages.
How do I fix CVE-2025-36082?
No fix has been published for CVE-2025-36082 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-36082 being exploited?
There is no known exploitation of CVE-2025-36082 in the wild and no public exploit code.
Other vulnerabilities in IBM OpenPages
- CVE-2025-36223 IBM OpenPages Host Header Injection
- CVE-2025-33110 IBM OpenPages Vulnerable to HTML Injection
- CVE-2025-36121 HTML Injection Vulnerability in a Specific URL Endpoint of the IBM OpenPages Application
- CVE-2025-27368 IBM OpenPages Information Disclosure
- CVE-2025-2670 IBM OpenPages information disclosure
Sources
Also known as GHSA-6jqf-xc4j-4qg4.