Vulnerabilities > IBM > Content Navigator

DATE CVE VULNERABILITY TITLE RISK
2019-04-25 CVE-2019-4033 Cross-site Scripting vulnerability in IBM Content Navigator 2.0.3/3.0.0
IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2019-03-22 CVE-2019-4035 Open Redirect vulnerability in IBM Content Navigator 3.0.0
IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site.
network
ibm CWE-601
4.9
2019-03-14 CVE-2019-4034 Unspecified vulnerability in IBM Content Navigator 3.0.0
IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation.
network
low complexity
ibm
6.5
2018-05-31 CVE-2018-1496 Cross-site Scripting vulnerability in IBM Content Navigator
IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2018-02-07 CVE-2018-1366 Unspecified vulnerability in IBM Content Navigator
IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection.
network
ibm
6.8
2018-01-29 CVE-2018-1364 XXE vulnerability in IBM Content Navigator 2.0.3/3.0.2/3.0.3
IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.
network
low complexity
ibm CWE-611
6.4
2017-10-05 CVE-2017-1522 Cross-site Scripting vulnerability in IBM Content Navigator 2.0.3.8/3.0.0/3.0.1
IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-09-07 CVE-2017-1502 Cross-site Scripting vulnerability in IBM Content Navigator 2.0.3/3.0.0/3.0.1
IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-08-04 CVE-2017-1331 Cross-site Scripting vulnerability in IBM Content Navigator
IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-05-22 CVE-2017-1282 Cross-site Scripting vulnerability in IBM Content Navigator
IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5