5.3
Medium
CVE-2025-27906 IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon…
Description
IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the files cannot be read obtained or modified.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Content Navigator | 3.2.0 | No fix stated |
| Content Navigator | 3.1.0 | No fix stated |
| Content Navigator 3.0 | 3.0.11 → 3.0.15 | No fix stated |
Other CVEs of Content Navigator
The 32 CVEs of Content Navigator →
CVE-2026-1243
IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting
5.4
Medium
CVE-2024-51475
IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection
5.4
Medium
CVE-2024-56341
IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting
5.4
Medium
CVE-2023-35896
IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF)
5.4
Medium