CVE-2021-29714

IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation. IBM X-Force ID: 200968...

IBM Content Navigator 输入验证错误漏洞

IBM Content Navigator is a Web client that provides users with a console that enables them to access, manage, and use enterprise content from anywhere in the enterprise, anytime, on virtually any mobile device. a denial of service vulnerability exists in IBM Content Navigator version 3.0.CD. The...

CVE-2021-20549

CVE-2021-20549 affects IBM Content Navigator 3.0.CD, with a cross-site scripting (XSS) vulnerability in the Web UI that could allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. The IBM bulletin cites a base CVSS v3.0 score of 5.4 (AV:N/AC:L/PR:L/UI...

IBM Content Navigator 跨站脚本漏洞

IBM Content Navigator is a Web client from IBM USA. The product supports searching and processing documents stored in content servers from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator version 3.0.CD. An attacker can exploit the vulnerability to embed arbitra...

IBM Content Navigator 跨站脚本漏洞

IBM Content Navigator is a Web client from IBM USA. The product supports searching and processing documents stored in content servers from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator version 3.0.CD. An attacker can exploit the vulnerability to embed arbitra...

Design/Logic Flaw

IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 191752...

CVE-2020-4757

CVE-2020-4757 affects IBM FileNet Content Manager and IBM Content Navigator 3.0.CD with a stored cross-site scripting vulnerability in the Web UI. The root cause is an XSS flaw in the Content Navigator/Content Manager web interface that could allow an attacker to embed arbitrary JavaScript, poten...