Content Navigator Security Vulnerabilities and Issues — Content Navigator CVE List

Lucene search

IbmContent Navigator

9 matches found

CVE•added 2020/12/21 6:15 p.m.•50 views

CVE-2020-4757

IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.4CVSS5.8AI score0.00413EPSS

CVE•added 2020/03/24 4:15 p.m.•42 views

CVE-2020-4253

IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559.

8.8CVSS8.2AI score0.00225EPSS

CVE•added 2020/11/10 3:15 p.m.•42 views

CVE-2020-4704

IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187189.

6.4CVSS5.1AI score0.00112EPSS

CVE•added 2020/11/10 3:15 p.m.•41 views

CVE-2020-4760

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188737.

5.4CVSS5.2AI score0.00157EPSS

CVE•added 2020/02/12 4:15 p.m.•39 views

CVE-2019-4741

IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815.

5.3CVSS5.2AI score0.00319EPSS

CVE•added 2020/08/20 4:15 p.m.•37 views

CVE-2020-4687

IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679.

4.3CVSS4.4AI score0.00119EPSS

CVE•added 2020/01/28 7:15 p.m.•29 views

CVE-2019-4679

IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could be used in further attacks against the system. IBM X-Force ID: 171515.

4.3CVSS4.4AI score0.00222EPSS

CVE•added 2020/08/20 4:15 p.m.•29 views

CVE-2020-4548

IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID: 18331...

4.3CVSS3.6AI score0.00178EPSS

CVE•added 2020/03/24 4:15 p.m.•28 views

CVE-2020-4309

IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080.

5.3CVSS4.9AI score0.00208EPSS