Show filters
36 Total Results
Displaying 1-10 of 36
Sort by:
Attacker Value
Unknown
CVE-2023-35896
Disclosure Date: November 03, 2023 (last updated November 10, 2023)
IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247.
0
Attacker Value
Unknown
CVE-2023-40684
Disclosure Date: October 04, 2023 (last updated February 25, 2025)
IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 264019.
0
Attacker Value
Unknown
CVE-2022-43581
Disclosure Date: December 07, 2022 (last updated February 24, 2025)
IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805.
0
Attacker Value
Unknown
CVE-2021-29714
Disclosure Date: August 06, 2021 (last updated February 23, 2025)
IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation. IBM X-Force ID: 200968.
0
Attacker Value
Unknown
CVE-2021-20448
Disclosure Date: April 26, 2021 (last updated February 22, 2025)
IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196624.
0
Attacker Value
Unknown
CVE-2021-20550
Disclosure Date: April 26, 2021 (last updated February 22, 2025)
IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199168.
0
Attacker Value
Unknown
CVE-2021-20549
Disclosure Date: April 26, 2021 (last updated February 22, 2025)
IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199167.
0
Attacker Value
Unknown
CVE-2020-4934
Disclosure Date: February 01, 2021 (last updated February 22, 2025)
IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 191752.
0
Attacker Value
Unknown
CVE-2020-4757
Disclosure Date: December 18, 2020 (last updated February 22, 2025)
IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188600.
0
Attacker Value
Unknown
CVE-2020-4760
Disclosure Date: November 09, 2020 (last updated February 22, 2025)
IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188737.
0
