Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:content_navigator:3.1.0:-:*:*:*:*:*:*

part: a version: 3.1.0 update: -

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductContent Navigator (52a9900a-8c03-5296-a733-d6e2a4289ca3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1243 vulnerable 2026-06-03 15:14:43.993076 IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability
MEDIUM (5.4)
IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-04-02T00:14:31.101Z
Updated: 2026-04-02T13:49:12.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27906 vulnerable 2026-06-03 15:00:13.462137 IBM Content Navigator information disclosure
MEDIUM (5.3)
IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the files cannot be read obtained or modified.
Published: 2025-10-14T14:08:42.994Z
Updated: 2025-10-14T19:09:55.400Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.