Ibm Content Navigator vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ibm Content Navigator: 2 record(s), with affected versions and fixes.cpe:2.3:a:ibm:content_navigator
CVE-2026-1243
Medium · 5.4
CWE-79 Apr 1, 2026
IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability
IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2025-27906
Medium · 5.3
CWE-548 Oct 14, 2025
IBM Content Navigator information disclosure
IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the files cannot be read obtained or modified.