Vulnerabilities

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting.

IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL.

IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection.

IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting.

IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF).

IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting.

IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins…

IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation.

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.

IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system.

IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting.

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting.

IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting.

IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to.

IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation.

IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system.

IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF).

IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could be used in further attacks against the system.

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting.

IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server.

IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing attacks, using an open redirect attack.

IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting.