Not rated
CVE-2018-1366 IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection
Description
IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection. An attacker could exploit this vulnerability to exploit other vulnerabilities in spreadsheet software. IBM X-Force ID: 137452.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Content Navigator 3.0 | 3.0.0 → 3.0.3 | No fix stated |
| Content Navigator 2.0 | 2.0.2.7 → 2.0.2.8 | No fix stated |
Other CVEs of Content Navigator
The 32 CVEs of Content Navigator →
CVE-2026-1243
IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting
5.4
Medium
CVE-2025-27906
IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon…
5.3
Medium
CVE-2024-51475
IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection
5.4
Medium
CVE-2024-56341
IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting
5.4
Medium