Advisories · Technology

IBM Content Navigator.

Every CVE that names IBM Content Navigator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-1243 CVE record

CVSS 5.4 Medium

IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability
- IBM Content Navigator
- Cross-site scripting (XSS)
Not analysed yet 2 Apr 2026
CVE-2025-27906 CVE record

CVSS 5.3 Medium

IBM Content Navigator information disclosure
- IBM Content Navigator
- CWE-548
Not analysed yet 14 Oct 2025
CVE-2024-51475 CVE record

CVSS 5.4 Medium

IBM Content Navigator HTML injection
- IBM Content Navigator
- Cross-site scripting (XSS)
Not analysed yet 16 May 2025
CVE-2024-56341 CVE record

CVSS 5.4 Medium

IBM Content Navigator cross-site scripting
- IBM Content Navigator
- Cross-site scripting (XSS)
Not analysed yet 2 Apr 2025
CVE-2023-35896 CVE record

CVSS 5.4 Medium

IBM Content Navigator server-side request forgery
- IBM Content Navigator
- Server-side request forgery (SSRF)
Not analysed yet 3 Nov 2023
CVE-2023-40684 CVE record

CVSS 4.6 Medium

IBM Content Navigator cross-site scripting
- IBM Content Navigator
- Cross-site scripting (XSS)
Not analysed yet 4 Oct 2023
CVE-2022-43581 CVE record

CVSS 7.5 High

IBM Content Navigator code execution
- IBM Content Navigator
- Memory corruption
Not analysed yet 7 Dec 2022
CVE-2021-29714 CVE record

CVSS 6.5 Medium

IBM Content Navigator: IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service…
- IBM Content Navigator
Not analysed yet 9 Aug 2021
CVE-2021-20550 CVE record

CVSS 5.4 Medium

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.
- IBM Content Navigator
Not analysed yet 27 Apr 2021
CVE-2021-20549 CVE record

CVSS 5.4 Medium

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.
- IBM Content Navigator
Not analysed yet 27 Apr 2021
CVE-2021-20448 CVE record

CVSS 5.4 Medium

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.
- IBM Content Navigator
Not analysed yet 27 Apr 2021
CVE-2020-4934 CVE record

CVSS 4.3 Medium

IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system.
- IBM Content Navigator
Not analysed yet 2 Feb 2021
CVE-2020-4757 CVE record

CVSS 6.4 Medium

IBM Content Navigator: IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored…
- IBM Content Navigator
Not analysed yet 21 Dec 2020
CVE-2020-4760 CVE record

CVSS 5.4 Medium

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting.
- IBM Content Navigator
Not analysed yet 10 Nov 2020
CVE-2020-4704 CVE record

CVSS 6.4 Medium

IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting.
- IBM Content Navigator
Not analysed yet 10 Nov 2020
CVE-2020-4687 CVE record

CVSS 4.3 Medium

IBM Content Navigator: IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached…
- IBM Content Navigator
Not analysed yet 20 Aug 2020
CVE-2020-4548 CVE record

CVSS 4.3 Medium

IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation.
- IBM Content Navigator
Not analysed yet 20 Aug 2020
CVE-2020-4309 CVE record

CVSS 4.3 Medium

IBM Content Navigator: IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated…
- IBM Content Navigator
Not analysed yet 24 Mar 2020
CVE-2020-4253 CVE record

CVSS 6.3 Medium

IBM Content Navigator: IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an…
- IBM Content Navigator
Not analysed yet 24 Mar 2020
CVE-2019-4741 CVE record

CVSS 5.3 Medium

IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF).
- IBM Content Navigator
Not analysed yet 12 Feb 2020
CVE-2019-4679 CVE record

CVSS 4.3 Medium

IBM Content Navigator: IBM Content Navigator 3.0CD could allow an authenticated user to gain information about…
- IBM Content Navigator
Not analysed yet 28 Jan 2020
CVE-2019-4571 CVE record

CVSS 5.4 Medium

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting.
- IBM Content Navigator
Not analysed yet 25 Sept 2019
CVE-2019-4263 CVE record

CVSS 4.3 Medium

IBM Content Navigator: IBM Content Navigator 3.0CD is vulnerable to local file inclusion…
- IBM Content Navigator
Not analysed yet 11 Jul 2019
CVE-2019-4092 CVE record

CVSS 6.8 Medium

IBM Content Navigator: IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing…
- IBM Content Navigator
Not analysed yet 25 Apr 2019
CVE-2019-4033 CVE record

CVSS 5.4 Medium

IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting.
- IBM Content Navigator
Not analysed yet 25 Apr 2019
CVE-2019-4035 CVE record

CVSS 6.3 Medium

IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site.
- IBM Content Navigator
Not analysed yet 22 Mar 2019
CVE-2019-4034 CVE record

CVSS 6.3 Medium

IBM Content Navigator: IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a…
- IBM Content Navigator
Not analysed yet 14 Mar 2019
CVE-2018-1496 CVE record

CVSS 5.4 Medium

IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting.
- IBM Content Navigator
Not analysed yet 31 May 2018
CVE-2018-1366 CVE record

IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection.
- IBM Content Navigator
Not analysed yet 7 Feb 2018
CVE-2018-1364 CVE record

IBM Content Navigator: IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE)…
- IBM Content Navigator
Not analysed yet 29 Jan 2018
CVE-2017-1522 CVE record

IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting.
- IBM Content Navigator
Not analysed yet 5 Oct 2017
CVE-2017-1331 CVE record

IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting.
- IBM Content Navigator
Not analysed yet 4 Aug 2017