Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:datacap:9.1.5:*:*:*:*:*:*:*

part: a version: 9.1.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDatacap (1d65f545-5a9d-57ad-afd8-5aafb79b60a0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-39741 vulnerable 2026-06-08 06:41:51.485182 IBM Datacap Navigator directory traversal
MEDIUM (4.3)
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 296010.
Published: 2024-07-15T02:09:40.787Z
Updated: 2024-08-02T04:26:16.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39740 vulnerable 2026-06-08 06:41:51.484687 IBM Datacap Navigator information disclosure
MEDIUM (4.3)
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could allow an attacker to gather information for future attacks against the system. IBM X-Force ID: 296009.
Published: 2024-07-15T02:11:20.973Z
Updated: 2024-08-02T04:26:15.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39739 vulnerable 2026-06-08 06:41:51.484182 IBM Datacap Navigator server-side request forgery
MEDIUM (5.4)
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 296008.
Published: 2024-07-15T01:25:48.329Z
Updated: 2024-08-02T04:26:16.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39737 vulnerable 2026-06-08 06:41:51.483339 IBM Datacap Navigator information disclosure
MEDIUM (5.4)
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 296004.
Published: 2024-07-15T01:27:07.662Z
Updated: 2024-08-02T04:26:15.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39736 vulnerable 2026-06-08 06:41:51.482718 IBM Datacap Navigator HTTP HOST header injection
MEDIUM (6.5)
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 296003.
Published: 2024-07-15T01:28:53.462Z
Updated: 2024-08-02T04:26:16.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39735 vulnerable 2026-06-08 06:41:51.482262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39734 vulnerable 2026-06-08 06:41:51.481615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39733 vulnerable 2026-06-08 06:41:51.480953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39732 vulnerable 2026-06-08 06:41:51.480422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39731 vulnerable 2026-06-08 06:41:51.479786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39729 vulnerable 2026-06-08 06:41:51.478742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39728 vulnerable 2026-06-08 06:41:51.475109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.