Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:content_navigator:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductContent Navigator (52a9900a-8c03-5296-a733-d6e2a4289ca3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-1888 vulnerable 2026-06-08 05:06:26.611104 Details available
Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2015-10-03T22:00:00.000Z
Updated: 2024-08-06T04:54:16.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0874 vulnerable 2026-06-08 05:05:14.778034 Details available
Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter.
Published: 2014-02-28T02:00:00.000Z
Updated: 2024-08-06T09:27:20.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0858 vulnerable 2026-06-08 05:05:14.741279 Details available
IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to bypass intended access restrictions and conduct deleteAction attacks via a modified URL.
Published: 2014-02-27T20:00:00.000Z
Updated: 2024-08-06T09:27:20.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5462 vulnerable 2026-06-08 05:04:51.750077 Details available
IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements.
Published: 2013-12-19T22:00:00.000Z
Updated: 2024-08-06T17:15:20.213Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.