Skip to content

Known vulnerabilities in IBM Content Navigator

Is your version affected?

CVE Summary Score Published
CVE-2026-1243 IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting 5.4 Medium Apr 2, 2026
CVE-2025-27906 IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon… 5.3 Medium Oct 14, 2025
CVE-2024-51475 IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection 5.4 Medium May 16, 2025
CVE-2024-56341 IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting 5.4 Medium Apr 2, 2025
CVE-2023-35896 IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF) 5.4 Medium Nov 3, 2023
CVE-2023-40684 IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting 4.6 Medium Oct 4, 2023
CVE-2022-43581 IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12… 7.5 High Dec 7, 2022
CVE-2021-29714 IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation 6.5 Medium Aug 9, 2021
CVE-2021-20550 IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting 5.4 Medium Apr 27, 2021
CVE-2021-20549 IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting 5.4 Medium Apr 27, 2021
CVE-2021-20448 IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting 5.4 Medium Apr 27, 2021
CVE-2020-4934 IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system 4.3 Medium Feb 2, 2021
CVE-2020-4757 IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting 6.4 Medium Dec 21, 2020
CVE-2020-4760 IBM Content Navigator 3.0CD is vulnerable to cross-site scripting 5.4 Medium Nov 10, 2020
CVE-2020-4704 IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting 6.4 Medium Nov 10, 2020
CVE-2020-4687 IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they… 4.3 Medium Aug 20, 2020
CVE-2020-4548 IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation 4.3 Medium Aug 20, 2020
CVE-2020-4309 IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid… 4.3 Medium Mar 24, 2020
CVE-2020-4253 IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to… 6.3 Medium Mar 24, 2020
CVE-2019-4741 IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF) 5.3 Medium Feb 12, 2020
CVE-2019-4679 IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and… 4.3 Medium Jan 28, 2020
CVE-2019-4571 IBM Content Navigator 3.0CD is vulnerable to cross-site scripting 5.4 Medium Sep 25, 2019
CVE-2019-4263 IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file… 4.3 Medium Jul 11, 2019
CVE-2019-4092 IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing attacks, using an open… 6.8 Medium Apr 25, 2019
CVE-2019-4033 IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting 5.4 Medium Apr 25, 2019

Other IBM products