CVE-2025-2824

Description

IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

Reserved 2025-03-26 | Published 2025-08-01 | Updated 2025-08-01 | Assigner ibm

Problem types

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Product status

Default status
unaffected

8.11.0.1
affected

8.11.1.0
affected

8.12.0.1
affected

9.0.0.1
affected

9.5.0
affected

References

www.ibm.com/support/pages/node/7241286 vendor-advisory patch

cve.org (CVE-2025-2824)

nvd.nist.gov (CVE-2025-2824)

Download JSON