Security Bulletin: IBM Navigator for i is affected by CVE-2019-4040

Summary IBM Navigator for i is supported by IBM i. IBM i has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4040 DESCRIPTION: IBM Navigator for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

IBM Navigator for i Cross-Site Scripting Vulnerability (CNVD-2019-39762)

IBM Navigator for i is a console interface used in IBMi for performing and managing critical tasks in IBMi from IBM USA. A cross-site scripting vulnerability exists in IBM Navigator for i, which can be exploited by remote attackers to inject arbitrary JavaScript code into the Web UI...

Security Bulletin: IBM Content Navigator is affected by a vulnerability in Apache Commons Beanutils (CVE-2019-10086)

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-10086 DESCRIPTION: In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the...

ATTACKdatamap - A Datasource Assessment On An Event Level To Show Potential Coverage Or The MITRE ATT&CK Framework

A datasource assessment on an event level to show potential coverage of the "MITRE ATT&CK" framework. This tool is developed by me and has no affiliation with "MITRE" nor with its great "ATT&CK" team, it is developed with the intention to ease the mapping of data sources to assess one's potential...

CVE-2019-4571

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166721...

CVE-2019-4571

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166721...

Cross site scripting

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166721...

CVE-2019-4571

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166721...

CVE-2019-4571

CVE-2019-4571 affects IBM Content Navigator 3.0CD. The affected component is the Web UI, where a cross-site scripting (XSS) vulnerability allows an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The vulnerability is rated CVSS v3.0...

PT-2019-17135 · Ibm · Ibm Content Navigator

Name of the Vulnerable Software and Affected Versions: IBM Content Navigator version 3.0CD Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

Security Bulletin: IBM Content Navigator is affected by a vulnerability in Apache Commons Compress (CVE-2019-12402)

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-12402 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an error in the internal file name encoding algorithm. By persuading a victim to open specially...

Security Bulletin:IBM Content Navigator is affected by a cross site scripting vulnerability

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4571 DESCRIPTION: IBM Content Navigator is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

CVE-2019-4263

IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015...

CVE-2019-4263

IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015...

Design/Logic Flaw

IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015...

CVE-2019-4263

IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015...

CVE-2019-4263

IBM Content Navigator 3.0CD is affected by CVE-2019-4263, a local file inclusion vulnerability in the ICN server. The issue allows access to sensitive configuration files via ICN URLs, with a CVSS v3.1/base score of 4.3 (NETWORK, LOW complexity, privileges LOW, no user interaction). Affected prod...

PT-2019-17003 · Ibm · Ibm Content Navigator

Name of the Vulnerable Software and Affected Versions: IBM Content Navigator version 3.0CD Description: The issue allows an attacker to access a configuration file in the ICN server through local file inclusion. Recommendations: For IBM Content Navigator version 3.0CD, consider restricting access...

The vulnerability of the Granit-Navigator-6.18 device’s built-in software lies in the absence of a mechanism to verify the authenticity of users performing modifications to the device’s built-in software. This allows attackers to carry out modifications to the software, thereby enabling complete system compromise.

The vulnerability of the embedded software of the “Granit-Navigator-6.18” device lies in the absence of a mechanism for verifying the authenticity of users performing modifications to the embedded software. Exploiting this vulnerability allows an attacker to modify the embedded software, thereby...

The vulnerability of the built-in software of the “Granit-Navigator-6.18” device arises from the absence of a mechanism for authenticating users during device configuration. This allows attackers to read and modify the device’s configuration parameters, thereby enabling system compromise.

The vulnerability of the built-in software of the “Granit-Navigator-6.18” device is due to the absence of a mechanism for authenticating users during device configuration using SMS commands. Exploiting this vulnerability allows a remote attacker to read and modify the device’s configuration...