IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
| Software | From | Fixed in |
|---|---|---|
| ibm / openpages_with_watson | 8.3 | 8.3.0.3 |
| ibm / openpages_with_watson | 9.0 | 9.0.0.5 |