{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-36082","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","state":"PUBLISHED","assignerShortName":"ibm","dateReserved":"2025-04-15T21:16:13.890Z","datePublished":"2025-09-15T15:31:45.446Z","dateUpdated":"2025-09-15T15:52:49.614Z"},"containers":{"cna":{"affected":[{"cpes":["cpe:2.3:a:ibm:openpages_with_watson:9.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:openpages_with_watson:9.1:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"OpenPages","vendor":"IBM","versions":[{"status":"affected","version":"9.0"},{"status":"affected","version":"9.1"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system."}],"value":"IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-525","description":"CWE-525 Information Exposure Through Browser Caching","lang":"en","type":"CWE"}]}],"providerMetadata":{"orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm","dateUpdated":"2025-09-15T15:31:45.446Z"},"references":[{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7244777"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

Affected endpoints have been updated to use Cache-Control : no-store header to align with security best practices. A fix has been created for each affected version of the named product. Download and install the fix as soon as possible. Fixes and installation instructions are provided at the URLs listed below:

 

Product

Remediation

For IBM OpenPages 9.1.1

 

Download URL for 9.1.1

http://ibm.com/support/pages/downloading-ibm-openpages-version-911-passport-advantage

For IBM OpenPages 9.0

 

- Apply 9.0 FixPack 5 (9.0.0.5)

- Then Apply 9.0.05 Interim Fix 5 (9.0.0.5.5)

Download URL for 9.0.0.5

https://www.ibm.com/support/pages/ibm-openpages-90-fix-pack-5

 

Download URL for 9.0.0.5.5

https://www.ibm.com/support/pages/ibm-openpages-9005-interim-fix-5

 

 


For IBM OpenPages v8.0/8.1/8.2/8.3 customers, IBM recommends to upgrade to a fixed and supported version 9.0 or 9.1.1 of the product.

\n\n
"}],"value":"Affected endpoints have been updated to use Cache-Control : no-store header to align with security best practices. A fix has been created for each affected version of the named product. Download and install the fix as soon as possible. Fixes and installation instructions are provided at the URLs listed below:\n\n \n\nProduct\n\nRemediation\n\nFor IBM OpenPages 9.1.1\n\n \n\nDownload URL for 9.1.1\n\n http://ibm.com/support/pages/downloading-ibm-openpages-version-911-passport-advantage \n\nFor IBM OpenPages 9.0\n\n \n\n- Apply 9.0 FixPack 5 (9.0.0.5)\n\n- Then Apply 9.0.05 Interim Fix 5 (9.0.0.5.5)\n\nDownload URL for 9.0.0.5\n\n https://www.ibm.com/support/pages/ibm-openpages-90-fix-pack-5 \n\n \n\nDownload URL for 9.0.0.5.5\n\n https://www.ibm.com/support/pages/ibm-openpages-9005-interim-fix-5 \n\n \n\n\n\n \n\n\nFor IBM OpenPages v8.0/8.1/8.2/8.3 customers, IBM recommends to upgrade to a fixed and supported version 9.0 or 9.1.1 of the product."}],"source":{"discovery":"UNKNOWN"},"title":"IBM OpenPages information disclosure","x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-15T15:52:43.589158Z","id":"CVE-2025-36082","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-09-15T15:52:49.614Z"}}]}}