Show filters
36 Total Results
Displaying 11-20 of 36
Sort by:
Attacker Value
Unknown
CVE-2020-4704
Disclosure Date: November 09, 2020 (last updated February 22, 2025)
IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187189.
0
Attacker Value
Unknown
CVE-2020-4548
Disclosure Date: August 20, 2020 (last updated February 22, 2025)
IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID: 183316.
0
Attacker Value
Unknown
CVE-2020-4687
Disclosure Date: August 20, 2020 (last updated November 28, 2024)
IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679.
0
Attacker Value
Unknown
CVE-2020-4253
Disclosure Date: March 23, 2020 (last updated February 21, 2025)
IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559.
0
Attacker Value
Unknown
CVE-2020-4309
Disclosure Date: March 23, 2020 (last updated February 21, 2025)
IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080.
0
Attacker Value
Unknown
CVE-2019-4741
Disclosure Date: February 10, 2020 (last updated February 21, 2025)
IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815.
0
Attacker Value
Unknown
CVE-2019-4679
Disclosure Date: January 28, 2020 (last updated November 27, 2024)
IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could be used in further attacks against the system. IBM X-Force ID: 171515.
0
Attacker Value
Unknown
CVE-2019-4571
Disclosure Date: September 25, 2019 (last updated November 27, 2024)
IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166721.
0
Attacker Value
Unknown
CVE-2019-4263
Disclosure Date: July 11, 2019 (last updated November 27, 2024)
IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015.
0
Attacker Value
Unknown
CVE-2019-4033
Disclosure Date: April 25, 2019 (last updated November 27, 2024)
IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155999.
0
