Ibm Content Navigator vulnerabilities
40 known vulnerabilities affecting ibm/content_navigator.
Total CVEs
40
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH5MEDIUM31LOW4
Vulnerabilities
Page 2 of 2
CVE-2018-1496P4MEDIUMCVSS 5.4v2.0.3v3.0.0+3 more2018-05-31
CVE-2018-1496 [MEDIUM] CWE-79 CVE-2018-1496: IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. T
IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141219.
nvd
CVE-2017-1331P4MEDIUMCVSS 5.4v2.0.3.5v2.0.3.6+3 more2017-08-04
CVE-2017-1331 [MEDIUM] CWE-79 CVE-2017-1331: IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability allo
IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126233.
nvd
CVE-2019-4571P4MEDIUMCVSS 5.4v3.0.0v3.0CD2019-09-25
CVE-2019-4571 [MEDIUM] CWE-79 CVE-2019-4571: IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users t
IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166721.
nvd
CVE-2019-4033P4MEDIUMCVSS 5.4v2.0.3v3.0.0+1 more2019-04-25
CVE-2019-4033 [MEDIUM] CWE-79 CVE-2019-4033: IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting. This vulnerability allo
IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155999.
nvd
CVE-2017-1522P4MEDIUMCVSS 5.4v2.0.3.8v3.0.0+2 more2017-10-05
CVE-2017-1522 [MEDIUM] CWE-79 CVE-2017-1522: IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vul
IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129832.
nvd
CVE-2017-1502P4MEDIUMCVSS 5.4v2.0.3v3.0.0+1 more2017-09-07
CVE-2017-1502 [MEDIUM] CWE-79 CVE-2017-1502: IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vul
IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129577.
nvd
CVE-2017-1282P4MEDIUMCVSS 5.4v2.0.3.5v2.0.3.6+3 more2017-05-22
CVE-2017-1282 [MEDIUM] CWE-79 CVE-2017-1282: IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability a
IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124760.
nvd
CVE-2017-1146P4MEDIUMCVSS 5.4v2.0.3v3.0.02017-03-20
CVE-2017-1146 [MEDIUM] CWE-79 CVE-2017-1146: IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability all
IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999736.
nvd
CVE-2021-20448P4MEDIUMCVSS 5.4v3.0.0v3.0.CD2021-04-27
CVE-2021-20448 [MEDIUM] CWE-79 CVE-2021-20448: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users
IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196624.
nvd
CVE-2021-20550P4MEDIUMCVSS 5.4v3.0.0v3.0.CD2021-04-27
CVE-2021-20550 [MEDIUM] CWE-79 CVE-2021-20550: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users
IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199168.
nvd
CVE-2021-20549P4MEDIUMCVSS 5.4v3.0.0v3.0.CD2021-04-27
CVE-2021-20549 [MEDIUM] CWE-79 CVE-2021-20549: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users
IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199167.
nvd
CVE-2019-4263P4MEDIUMCVSS 4.3v3.0.0v3.0CD2019-07-11
CVE-2019-4263 [MEDIUM] CWE-829 CVE-2019-4263: IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a
IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015.
nvd
CVE-2020-4687P4MEDIUMCVSS 4.3v3.0.0v3.0.7+1 more2020-08-20
CVE-2020-4687 [MEDIUM] CVE-2020-4687: IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of an
IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679.
nvd
CVE-2013-5462P4MEDIUMCVSS 4.3v2.0.0v2.0.1+1 more2013-12-19
CVE-2013-5462 [MEDIUM] CWE-20 CVE-2013-5462: IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 be
IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements.
nvd
CVE-2019-4679P4MEDIUMCVSS 4.3v3.0.0v3.0CD2020-01-28
CVE-2019-4679 [MEDIUM] CVE-2019-4679: IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting
IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could be used in further attacks against the system. IBM X-Force ID: 171515.
nvd
CVE-2014-8911P4MEDIUMCVSS 4.3v2.0.0v2.0.1+1 more2015-02-14
CVE-2014-8911 [MEDIUM] CWE-79 CVE-2014-8911: Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.0 and 2.0.1 before 2.0.1.2 FP0
Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.0 and 2.0.1 before 2.0.1.2 FP002 IF003 and 2.0.3 before 2.0.3.2 FP002 allows remote attackers to inject arbitrary web script or HTML via the Accept-Language HTTP header.
nvd
CVE-2015-1888P4LOWCVSS 3.5v2.0.2v2.0.32015-10-03
CVE-2015-1888 [LOW] CWE-79 CVE-2015-1888: Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2
Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2014-0874P4LOWCVSS 3.5v2.0.0v2.0.1+1 more2014-02-28
CVE-2014-0874 [LOW] CWE-79 CVE-2014-0874: Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allow
Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter.
nvd
CVE-2014-0858P4LOWCVSS 3.5v2.0.0v2.0.1+1 more2014-02-27
CVE-2014-0858 [LOW] CWE-264 CVE-2014-0858: IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to bypass inten
IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to bypass intended access restrictions and conduct deleteAction attacks via a modified URL.
nvd
CVE-2020-4548P4LOWCVSS 2.7v3.0.0v3.0.7+1 more2020-08-20
CVE-2020-4548 [LOW] CWE-20 CVE-2020-4548: IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious admini
IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID: 183316.
nvd
← Previous2 / 2