CVE-2024-49337

Summary

CVE-2024-49337 is a vulnerability affecting IBM OpenPages with Watson versions 8.3 and 9.0. The issue involves insufficient input validation, which allows a remote, authenticated attacker to inject HTML code into workflow email notifications. This malicious HTML can contain malicious scripts that, when executed in the victim's mail client, can lead to phishing or identity theft attacks. The vulnerability poses a significant risk and requires immediate remediation efforts from IBM and affected organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.