Ibm Content Navigator vulnerabilities

CVE-2026-1243 [MEDIUM] CWE-79 CVE-2026-1243: IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerabi IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CVE-2025-27906 [MEDIUM] CWE-548 CVE-2025-27906: IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the app IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the files cannot be read obtained or modified.

CVE-2024-51475 [MEDIUM] CWE-80 CVE-2024-51475: IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection. A remote attacker c IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

CVE-2024-56341 [MEDIUM] CWE-79 CVE-2024-56341: IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting. This vulnerab IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CVE-2023-35896 [MEDIUM] CWE-918 CVE-2023-35896: IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247.

CVE-2023-40684 [MEDIUM] CWE-79 CVE-2023-40684: IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cro IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 264019.

CVE-2022-43581 [HIGH] CWE-119 CVE-2022-43581: IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805.

CVE-2021-29714 [MEDIUM] CWE-20 CVE-2021-29714: IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improp IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation. IBM X-Force ID: 200968.

CVE-2021-20448 [MEDIUM] CWE-79 CVE-2021-20448: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196624.

CVE-2021-20550 [MEDIUM] CWE-79 CVE-2021-20550: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199168.

CVE-2021-20549 [MEDIUM] CWE-79 CVE-2021-20549: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199167.

CVE-2020-4934 [MEDIUM] CWE-22 CVE-2020-4934: IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 191752.

CVE-2020-4757 [MEDIUM] CWE-79 CVE-2020-4757: IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scri IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188600.

CVE-2020-4760 [MEDIUM] CWE-79 CVE-2020-4760: IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users t IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188737.

CVE-2020-4704 [MEDIUM] CWE-79 CVE-2020-4704: IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187189.

CVE-2020-4687 [MEDIUM] CVE-2020-4687: IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of an IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679.

CVE-2020-4548 [LOW] CWE-20 CVE-2020-4548: IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious admini IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID: 183316.

CVE-2020-4253 [HIGH] CWE-613 CVE-2020-4253: IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authentica IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559.

CVE-2020-4309 [MEDIUM] CWE-200 CVE-2020-4309: IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which co IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080.

CVE-2019-4741 [MEDIUM] CWE-918 CVE-2019-4741: IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an u IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815.