Content Navigator@3.0.1 Security Vulnerabilities and Issues — Content Navigator@3.0.1 CVE List

Lucene search

IbmContent Navigator3.0.1

6 matches found

CVE•added 2022/12/07 6:15 p.m.•65 views

CVE-2022-43581

IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805.

8.8CVSS8AI score0.00074EPSS

CVE•added 2017/10/05 5:29 p.m.•36 views

CVE-2017-1522

IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

5.4CVSS5.2AI score0.00198EPSS

CVE•added 2018/05/31 9:29 p.m.•35 views

CVE-2018-1496

IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-...

5.4CVSS5.2AI score0.00216EPSS

CVE•added 2017/09/07 4:29 p.m.•32 views

CVE-2017-1502

5.4CVSS5.2AI score0.00227EPSS

CVE•added 2018/01/29 4:29 p.m.•31 views

CVE-2018-1364

IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 137449.

8.2CVSS7.9AI score0.00556EPSS

CVE•added 2018/02/07 5:29 p.m.•31 views

CVE-2018-1366

IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection. An attacker could exploit this vulnerability to exploit other vulnerabilities in spreadsheet software. IBM X-Force ID: 137452.

7.8CVSS7.4AI score0.00165EPSS