IBM Datacap Navigator Secure Session Cookie

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing lies in the absence of a “Secure” flag in the session cookies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by intercepting the...

IBM Datacap Navigator Unauthorized Access

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves shortcomings in the error reporting mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

IBM Datacap Navigator Path Traversal

The vulnerability in the IBM Datacap Navigator software, a web-based application for document collection and processing, is related to an incorrect limitation on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

IBM Datacap Navigator Unauthorized Access

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves deficiencies in the security protection of operational data in the source code. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access t...

Security Bulletin: Multiple IBM® Db2® security vulnerability fixes

Summary If you use IBM® Db2® as your database in your IBM Datacap deployment, please follow the Db2 security bulletins referred here to remedy the vulnerabilities. IBM® Db2® is affected by a vulnerability in the open source zlib library CVE-2023-45853 and IBM® Db2® is vulnerable to sensitive...

IBM Datacap Web Client XSS

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

IBM Datacap SSRF

The vulnerability in the web-based client of IBM Datacap software for document collection and processing involves insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

IBM Datacap Navigator Cryptographic Defects Decryption

The vulnerability of the IBM Datacap Navigator software for document collection and processing lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to decrypt confidential information remotely...

IBM Datacap Unencrypted Storage

The vulnerability in the web-based client of IBM Datacap software for document collection and processing involves the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the protected information...

IBM Datacap Navigator XSS

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves shortcomings in the processing of HTTP header requests. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks, cache poisoning attacks, or...

IBM Datacap Web Client XSS

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

IBM Datacap Navigator Unauthorized Access Disclosure

The vulnerability of the IBM Datacap Navigator software for document collection and processing lies in the fact that system data can be disclosed to unauthorized individuals. Exploiting this vulnerability allows a malicious actor to disclose protected information by sending specially crafted HTTP...

IBM Datacap Navigator Cross-Site Scripting Vulnerability

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator suffers from a cross-site scripting vulnerability that originates from allowing arbitrary JavaScript code to be embedded in the Web UI, which could alter the intended functionality an...

IBM Datacap Navigator Information Disclosure Vulnerability (CNVD-2024-33368)

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. A security vulnerability exists in IBM Datacap Navigator, which can be exploited by attackers to obtain sensitive information from the source code...

IBM Datacap Navigator Encryption Issue Vulnerability

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator suffers from a cryptographic issue vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt highly...

IBM Datacap Navigator Server-Side Request Forgery Vulnerability

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator has a server-side request forgery vulnerability that can be exploited by an attacker to send unauthorized requests from the system, which could lead to network enumeration or facilita...

IBM Datacap Navigator Cross-Site Scripting Vulnerability

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Datacap Navigator, which can be exploited by an attacker to embed arbitrary JavaScript code in the Web UI...

IBM Datacap Navigator Information Disclosure Vulnerability (CNVD-2024-33363)

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. An information disclosure vulnerability exists in IBM Datacap Navigator that originates from displaying version information in an HTTP request, which can be exploited by an attacker to gather information...

IBM Datacap Navigator HTTP Header Injection Vulnerability

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator suffers from an HTTP header injection vulnerability that originates from an input validation error in the HOST header, which can be exploited by an attacker to conduct cross-site...

IBM Datacap Navigator Path Traversal Vulnerability

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator suffers from a path traversal vulnerability that can be exploited by an attacker to view arbitrary files on the system via a specially crafted URL request...