{"id":"CVE-2017-1333","aliases":["EUVD-2017-10349","GHSA-26f3-rpp2-39rf"],"status":"published","title":"IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain...","description":"IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01322,"percentile":0.71089,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-11-01T21:00:00Z","modified":"2026-06-17T01:14:16Z","products":[{"vendor":"ibm","product":"openpages grc platform"},{"vendor":"ibm","product":"openpages_grc_platform"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/126241","tags":["x_refsource_MISC","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101656","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21997796","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1333"},{"url":"https://github.com/advisories/GHSA-26f3-rpp2-39rf"}],"sources":{"cve":[{"id":"CVE-2017-1333","description":"IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241.","status":"published","published":"2017-11-01T21:00:00Z","modified":"2024-09-16T19:30:21.363Z","updated_at":"2026-11-02T14:33:19.203575Z"}],"euvd":[{"id":"EUVD-2017-10349","description":"IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241.","status":"published","published":"2017-11-01T21:00:00Z","modified":"2024-09-16T19:30:21Z","updated_at":"2026-11-03T00:55:22.355392Z"}],"ghsa":[{"id":"GHSA-26f3-rpp2-39rf","title":"IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain...","description":"IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241.","status":"published","published":"2022-05-17T00:23:43Z","modified":"2023-02-03T05:01:38Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:01.051702Z"}],"nvd":[{"id":"CVE-2017-1333","description":"IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241.","status":"published","published":"2017-11-01T21:29:00.497Z","modified":"2026-06-17T01:14:16.31Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:08.01771Z"}]}}
