Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:content_navigator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductContent Navigator (52a9900a-8c03-5296-a733-d6e2a4289ca3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-40684 vulnerable 2026-06-08 06:11:04.224610 IBM Content Navigator cross-site scripting
MEDIUM (4.6)
IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 264019.
Published: 2023-10-04T13:38:40.057Z
Updated: 2024-09-19T14:45:55.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35896 vulnerable 2026-06-08 06:06:28.073461 IBM Content Navigator server-side request forgery
MEDIUM (5.4)
IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247.
Published: 2023-11-03T02:14:31.552Z
Updated: 2024-09-04T20:33:54.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43581 vulnerable 2026-06-08 05:49:33.579836 IBM Content Navigator code execution
HIGH (7.5)
IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805.
Published: 2022-12-07T17:07:51.028Z
Updated: 2025-04-22T19:53:08.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29714 vulnerable 2026-06-08 05:31:26.860386 Details available
MEDIUM (6.5)
IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation. IBM X-Force ID: 200968.
Published: 2021-08-09T16:05:14.371Z
Updated: 2024-09-16T19:19:13.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20550 vulnerable 2026-06-08 05:29:09.449301 Details available
MEDIUM (5.4)
IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199168.
Published: 2021-04-27T16:32:51.789Z
Updated: 2024-09-16T16:53:39.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20549 vulnerable 2026-06-08 05:29:09.448852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20448 vulnerable 2026-06-08 05:29:09.267964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4934 vulnerable 2026-06-08 05:26:41.209439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4760 vulnerable 2026-06-08 05:26:40.882941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4757 vulnerable 2026-06-08 05:26:40.877955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4704 vulnerable 2026-06-08 05:26:40.806395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4687 vulnerable 2026-06-08 05:26:40.716533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4548 vulnerable 2026-06-08 05:25:59.514228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4309 vulnerable 2026-06-08 05:25:59.158171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4253 vulnerable 2026-06-08 05:25:59.050209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4741 vulnerable 2026-06-08 05:13:57.456173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4679 vulnerable 2026-06-08 05:13:57.405511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4571 vulnerable 2026-06-08 05:13:57.311705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4263 vulnerable 2026-06-08 05:13:57.023198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4092 vulnerable 2026-06-08 05:13:56.806307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4035 vulnerable 2026-06-08 05:13:56.684274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4034 vulnerable 2026-06-08 05:13:56.683775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4033 vulnerable 2026-06-08 05:13:56.681541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1496 vulnerable 2026-06-08 05:11:18.317473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1366 vulnerable 2026-06-08 05:11:17.820336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1364 vulnerable 2026-06-08 05:11:17.805092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1522 vulnerable 2026-06-08 05:09:22.512588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1331 vulnerable 2026-06-08 05:09:21.782789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.