CVE-2023-40683 HIGH

CVE-2023-40683: IBM OpenPages with Watson privilege escalation

Vendor Ibm
Product OpenPages with Watson
Weakness CWE-285
Published January 19, 2024
Last update May 30, 2025
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM OpenPages with Watson 8.3 and 9.0 could allow remote attacker to bypass security restrictions, caused by insufficient authorization checks. By authenticating as an OpenPages user and using non-public APIs, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrative access to the application. IBM X-Force ID: 264005.

Key dates

02Disclosure timeline

January 19, 2024 CVE published
May 30, 2025 Record updated