Ibm

Content Navigator

38 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2020-4757

Exploit
  • EPSS 0.41%
  • Veröffentlicht 21.12.2020 18:15:15
  • Zuletzt bearbeitet 21.11.2024 05:33:12

IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading t...

5.4

CVE-2020-4760

  • EPSS 0.16%
  • Veröffentlicht 10.11.2020 15:15:12
  • Zuletzt bearbeitet 21.11.2024 05:33:12

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

5.4

CVE-2020-4704

  • EPSS 0.11%
  • Veröffentlicht 10.11.2020 15:15:12
  • Zuletzt bearbeitet 21.11.2024 05:33:09

IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

4.3

CVE-2020-4687

  • EPSS 0.12%
  • Veröffentlicht 20.08.2020 16:15:11
  • Zuletzt bearbeitet 21.11.2024 05:33:07

IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679.

4

CVE-2020-4548

  • EPSS 0.18%
  • Veröffentlicht 20.08.2020 16:15:11
  • Zuletzt bearbeitet 21.11.2024 05:32:52

IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM ...

5.3

CVE-2020-4309

  • EPSS 0.21%
  • Veröffentlicht 24.03.2020 16:15:12
  • Zuletzt bearbeitet 21.11.2024 05:32:34

IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080.

8.8

CVE-2020-4253

  • EPSS 0.23%
  • Veröffentlicht 24.03.2020 16:15:12
  • Zuletzt bearbeitet 21.11.2024 05:32:28

IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559.

5.3

CVE-2019-4741

  • EPSS 0.32%
  • Veröffentlicht 12.02.2020 16:15:11
  • Zuletzt bearbeitet 21.11.2024 04:44:05

IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X...

4.3

CVE-2019-4679

  • EPSS 0.22%
  • Veröffentlicht 28.01.2020 19:15:14
  • Zuletzt bearbeitet 21.11.2024 04:43:58

IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could be used in further attacks against the system. IBM X-Force ID: 171515.

5.4

CVE-2019-4571

  • EPSS 0.29%
  • Veröffentlicht 25.09.2019 20:15:11
  • Zuletzt bearbeitet 21.11.2024 04:43:45

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...