https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:11:53.936024+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-49337 CVE-2024-49337 — IBM OpenPages HTML injection 2026-10-07T11:11:53.937203+00:00

Affected: IBM OpenPages with Watson

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages

is vulnerable to HTML injection, caused by improper validation of user-supplied input of text fields used to construct workflow email notifications. A remote authenticated attacker could exploit this vulnerability using HTML tags in a text field of an object to inject malicious script into an email which would be executed in a victim's mail client within the security context of the OpenPages mail message. An attacker could use this for phishing or identity theft attacks.