Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

40 records in Content Navigator · all components

TI-2022-21355 CVE-2022-43581 · GHSA-x8v4-7grp-4rw2

IBM Content Navigator code execution

Priority MEDIUM 41

IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0074 Published 2022-12-07 No fix listed CWE-119
TI-2020-03664 CVE-2020-4253 · GHSA-8mx2-gx23-v8q6

Insufficient session expiration in IBM Content Navigator

Priority MEDIUM 40

IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00902 Published 2020-03-24 No fix listed CWE-613
TI-2018-01261 CVE-2018-1364 · GHSA-9w5q-vv7j-283j

XML external entity injection in IBM Content Navigator

Priority MEDIUM 40

IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.02374 Published 2018-01-29 No fix listed CWE-611
TI-2021-10402 CVE-2021-29714 · GHSA-r9wv-hvx2-jx2c

Improper input validation in IBM Content Navigator

Priority LOW 31

IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01012 Published 2021-08-09 No fix listed CWE-20
TI-2020-04032 CVE-2020-4757 · GHSA-r3wr-6h9c-m59r

Cross-site scripting in IBM Content Navigator

Priority LOW 31

IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.01292 Published 2020-12-21 No fix listed CWE-79
TI-2019-03064 CVE-2019-4092 · GHSA-mw68-3q2w-cqx9

Open redirect in IBM Content Navigator

Priority LOW 29

IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing attacks, using an open redirect attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00786 Published 2019-04-25 No fix listed CWE-601
TI-2024-34396 CVE-2024-51475 · GHSA-qmpm-vw3w-fpxq

IBM Content Navigator HTML injection

Priority LOW 27

IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00274 Published 2025-05-16 No fix listed CWE-80
TI-2020-03713 CVE-2020-4309 · GHSA-m69q-57q3-55f9

Information disclosure in IBM Content Navigator

Priority LOW 27

IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01305 Published 2020-03-24 No fix listed CWE-200
TI-2020-04034 CVE-2020-4760 · GHSA-m785-q8fj-8w82

Cross-site scripting in IBM Content Navigator

Priority LOW 26

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00861 Published 2020-11-10 No fix listed CWE-79
TI-2020-04004 CVE-2020-4704 · GHSA-5m9g-c8g6-jvf7

Cross-site scripting in IBM Content Navigator

Priority LOW 26

IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00861 Published 2020-11-10 No fix listed CWE-79
TI-2019-03352 CVE-2019-4571 · GHSA-vjrf-3jjr-c7jh

Cross-site scripting in IBM Content Navigator

Priority LOW 26

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00699 Published 2019-09-25 No fix listed CWE-79
TI-2019-03021 CVE-2019-4035 · GHSA-2h27-fv2f-c56r

Open redirect in IBM Content Navigator

Priority LOW 26

IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00922 Published 2019-03-22 No fix listed CWE-601
TI-2018-01371 CVE-2018-1496 · GHSA-7mwg-7x8h-7xc2

Cross-site scripting in IBM Content Navigator

Priority LOW 26

IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00949 Published 2018-05-31 No fix listed CWE-79
TI-2017-01091 CVE-2017-1331 · GHSA-r3j4-r46f-43xm

Cross-site scripting in IBM Content Navigator

Priority LOW 26

IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00729 Published 2017-08-04 No fix listed CWE-79
TI-2023-21476 CVE-2023-40684 · GHSA-mjq8-rr88-c523

IBM Content Navigator cross-site scripting

Priority LOW 25

IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00371 Published 2023-10-04 No fix listed CWE-79
TI-2021-03787 CVE-2021-20550 · GHSA-v5m7-665r-wwfw

Cross-site scripting in IBM Content Navigator

Priority LOW 25

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00495 Published 2021-04-27 No fix listed CWE-79
TI-2021-03786 CVE-2021-20549 · GHSA-25pj-2jwp-wwwf

Cross-site scripting in IBM Content Navigator

Priority LOW 25

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00495 Published 2021-04-27 No fix listed CWE-79
TI-2021-03716 CVE-2021-20448 · GHSA-x99g-cvrc-4j9q

Cross-site scripting in IBM Content Navigator

Priority LOW 25

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00495 Published 2021-04-27 No fix listed CWE-79
TI-2019-03019 CVE-2019-4033 · GHSA-v7rr-mcc8-3mqh

Cross-site scripting in IBM Content Navigator

Priority LOW 25

IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0066 Published 2019-04-25 No fix listed CWE-79
TI-2017-01223 CVE-2017-1522 · GHSA-73rf-m3q4-jpq4

Cross-site scripting in IBM Content Navigator

Priority LOW 25

IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0054 Published 2017-10-05 No fix listed CWE-79
TI-2017-01048 CVE-2017-1282 · GHSA-4vp8-9gxh-93h8

Cross-site scripting in IBM Content Navigator

Priority LOW 25

IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00538 Published 2017-05-22 No fix listed CWE-79
Load more
Open these records in search →