# IBM Content Navigator.

Every CVE that names IBM Content Navigator among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-1243.md)
  `CVE-2026-1243` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Cross-site scripting (XSS)
- [IBM Content Navigator information disclosure](https://agentprime.io/advisories/CVE-2025-27906.md)
  `CVE-2025-27906` · CVE record: IBM Content Navigator · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-548
- [IBM Content Navigator HTML injection](https://agentprime.io/advisories/CVE-2024-51475.md)
  `CVE-2024-51475` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 16 May 2025 · Tags: Cross-site scripting (XSS)
- [IBM Content Navigator cross-site scripting](https://agentprime.io/advisories/CVE-2024-56341.md)
  `CVE-2024-56341` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 2 Apr 2025 · Tags: Cross-site scripting (XSS)
- [IBM Content Navigator server-side request forgery](https://agentprime.io/advisories/CVE-2023-35896.md)
  `CVE-2023-35896` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: Server-side request forgery (SSRF)
- [IBM Content Navigator cross-site scripting](https://agentprime.io/advisories/CVE-2023-40684.md)
  `CVE-2023-40684` · CVE record: IBM Content Navigator · CVSS 4.6 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Cross-site scripting (XSS)
- [IBM Content Navigator code execution](https://agentprime.io/advisories/CVE-2022-43581.md)
  `CVE-2022-43581` · CVE record: IBM Content Navigator · CVSS 7.5 High · Not analysed yet · Published 7 Dec 2022 · Tags: Memory corruption
- [IBM Content Navigator: IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service…](https://agentprime.io/advisories/CVE-2021-29714.md)
  `CVE-2021-29714` · CVE record: IBM Content Navigator · CVSS 6.5 Medium · Not analysed yet · Published 9 Aug 2021
- [IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20550.md)
  `CVE-2021-20550` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 27 Apr 2021
- [IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20549.md)
  `CVE-2021-20549` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 27 Apr 2021
- [IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20448.md)
  `CVE-2021-20448` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 27 Apr 2021
- [IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system.](https://agentprime.io/advisories/CVE-2020-4934.md)
  `CVE-2020-4934` · CVE record: IBM Content Navigator · CVSS 4.3 Medium · Not analysed yet · Published 2 Feb 2021
- [IBM Content Navigator: IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored…](https://agentprime.io/advisories/CVE-2020-4757.md)
  `CVE-2020-4757` · CVE record: IBM Content Navigator · CVSS 6.4 Medium · Not analysed yet · Published 21 Dec 2020
- [IBM Content Navigator 3.0CD is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4760.md)
  `CVE-2020-4760` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 10 Nov 2020
- [IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4704.md)
  `CVE-2020-4704` · CVE record: IBM Content Navigator · CVSS 6.4 Medium · Not analysed yet · Published 10 Nov 2020
- [IBM Content Navigator: IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached…](https://agentprime.io/advisories/CVE-2020-4687.md)
  `CVE-2020-4687` · CVE record: IBM Content Navigator · CVSS 4.3 Medium · Not analysed yet · Published 20 Aug 2020
- [IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation.](https://agentprime.io/advisories/CVE-2020-4548.md)
  `CVE-2020-4548` · CVE record: IBM Content Navigator · CVSS 4.3 Medium · Not analysed yet · Published 20 Aug 2020
- [IBM Content Navigator: IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated…](https://agentprime.io/advisories/CVE-2020-4309.md)
  `CVE-2020-4309` · CVE record: IBM Content Navigator · CVSS 4.3 Medium · Not analysed yet · Published 24 Mar 2020
- [IBM Content Navigator: IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an…](https://agentprime.io/advisories/CVE-2020-4253.md)
  `CVE-2020-4253` · CVE record: IBM Content Navigator · CVSS 6.3 Medium · Not analysed yet · Published 24 Mar 2020
- [IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF).](https://agentprime.io/advisories/CVE-2019-4741.md)
  `CVE-2019-4741` · CVE record: IBM Content Navigator · CVSS 5.3 Medium · Not analysed yet · Published 12 Feb 2020
- [IBM Content Navigator: IBM Content Navigator 3.0CD could allow an authenticated user to gain information about…](https://agentprime.io/advisories/CVE-2019-4679.md)
  `CVE-2019-4679` · CVE record: IBM Content Navigator · CVSS 4.3 Medium · Not analysed yet · Published 28 Jan 2020
- [IBM Content Navigator 3.0CD is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4571.md)
  `CVE-2019-4571` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 25 Sept 2019
- [IBM Content Navigator: IBM Content Navigator 3.0CD is vulnerable to local file inclusion…](https://agentprime.io/advisories/CVE-2019-4263.md)
  `CVE-2019-4263` · CVE record: IBM Content Navigator · CVSS 4.3 Medium · Not analysed yet · Published 11 Jul 2019
- [IBM Content Navigator: IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing…](https://agentprime.io/advisories/CVE-2019-4092.md)
  `CVE-2019-4092` · CVE record: IBM Content Navigator · CVSS 6.8 Medium · Not analysed yet · Published 25 Apr 2019
- [IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4033.md)
  `CVE-2019-4033` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 25 Apr 2019
- [IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site.](https://agentprime.io/advisories/CVE-2019-4035.md)
  `CVE-2019-4035` · CVE record: IBM Content Navigator · CVSS 6.3 Medium · Not analysed yet · Published 22 Mar 2019
- [IBM Content Navigator: IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a…](https://agentprime.io/advisories/CVE-2019-4034.md)
  `CVE-2019-4034` · CVE record: IBM Content Navigator · CVSS 6.3 Medium · Not analysed yet · Published 14 Mar 2019
- [IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1496.md)
  `CVE-2018-1496` · CVE record: IBM Content Navigator · CVSS 5.4 Medium · Not analysed yet · Published 31 May 2018
- [IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection.](https://agentprime.io/advisories/CVE-2018-1366.md)
  `CVE-2018-1366` · CVE record: IBM Content Navigator · No CVSS score · Not analysed yet · Published 7 Feb 2018
- [IBM Content Navigator: IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE)…](https://agentprime.io/advisories/CVE-2018-1364.md)
  `CVE-2018-1364` · CVE record: IBM Content Navigator · No CVSS score · Not analysed yet · Published 29 Jan 2018
- [IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1522.md)
  `CVE-2017-1522` · CVE record: IBM Content Navigator · No CVSS score · Not analysed yet · Published 5 Oct 2017
- [IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1331.md)
  `CVE-2017-1331` · CVE record: IBM Content Navigator · No CVSS score · Not analysed yet · Published 4 Aug 2017

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-content-navigator>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-content-navigator/>. Everything for agents: <https://agentprime.io/llms.txt>.