Volerion logoVolerion
Volerion logoVolerion

IBM OpenPages HTML Injection Vulnerability

Vulnerability

A vulnerability allowing HTML injection has been identified in IBM OpenPages versions 9.1 and 9.0 with Watson. This issue allows remote attackers to inject malicious HTML, which is executed in the context of the victim's web browser and the hosting site.

Impact

Exploitation of this vulnerability allows for HTML injection, which can be used to execute malicious scripts in the context of the user's browser.

Remediation

Users of IBM OpenPages 9.1.2 can download the latest version from the IBM OpenPages Version 9.1.2 Download Page. For IBM OpenPages 9.0, users should apply Fix Pack 5 (9.0.0.5) followed by Interim Fix 7 (9.0.0.5.7). Download instructions for both versions are available on the IBM Support Pages.

Added: Nov 6, 2025, 9:54 PM
Updated: Nov 6, 2025, 9:54 PM

Vulnerability Rating

Custom Algorithm
spread
1.4
impact
1.7
exploitability
6.0
remediation
7.7
relevance
1.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.