IBM Content Navigator

• CVE-2026-1243 Medium 5.4 IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-27906 Medium 5.3 IBM Content Navigator information disclosure 0.3%
• CVE-2024-51475 Medium 5.4 IBM Content Navigator HTML injection 0.3%
• CVE-2024-56341 Medium 5.4 IBM Content Navigator cross-site scripting 0.2%
• CVE-2023-35896 Medium 5.4 IBM Content Navigator server-side request forgery 0.3%
• CVE-2023-40684 Medium 4.6 IBM Content Navigator cross-site scripting 0.4%
• CVE-2022-43581 High 7.5 IBM Content Navigator code execution 0.7%
• CVE-2021-29714 Medium 6.5 IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation. IBM X-Force ID: 200968. 1.0%
• CVE-2021-20550 Medium 5.4 IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall 0.5%
• CVE-2021-20549 Medium 5.4 IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall 0.5%
• CVE-2021-20448 Medium 5.4 IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall 0.5%
• CVE-2020-4934 Medium 4.3 IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view a 1.8%
• CVE-2020-4757 Medium 6.4 IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin 1.3%
• CVE-2020-4760 Medium 5.4 IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially 0.9%
• CVE-2020-4704 Medium 6.4 IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pote 0.9%
• CVE-2020-4687 Medium 4.3 IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679. 1.0%
• CVE-2020-4548 Medium 4.3 IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with i 0.7%
• CVE-2020-4309 Medium 4.3 IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080. 1.3%
• CVE-2020-4253 Medium 6.3 IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559. 0.9%