Known vulnerabilities in IBM Content Navigator
Vendor:
IBM Corporation
Software:
IBM Content Navigator
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_content_navigator:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
34
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.1.0 IF008 LA2
3.2.0
3.2.0 IF003
3.2.0 IF002
3.2.0 IF001
3.0.15
3.1.0
3.1.0 IF007
3.1.0 IF006
3.1.0 IF005
3.1.0 IF004
3.1.0 IF003
3.1.0 IF002
3.1.0 IF001
3.0.15 IF008
3.0.15 IF007
3.0.15 IF006
3.0.15 IF004
3.0.15 IF003
3.0.15 IF001
3.1.0 IF008
3.0.15 IF009
3.2.0 IF004
3.0.15 IF5
3.0.11. IF18
3.0.11 IF016
3.0.14 IF005
3.0.15 IF002
3.0.11.13
3.0.13.5
3.0.14.2
3.0.11.14
3.0.13.6
3.0.14.3
3.0.14
3.0.11.10
3.0.12.6
3.0.13.3
3.0.12.4
3.0.13
3.0.12.3
3.0.12.2
3.0.12.1
3.0.11.7
3.0.11.6
3.0.11.5
3.0.11.4
3.0.11.3
3.0.11.2
3.0.11.1
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
Vulnerabilities (34)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU128402 - Improper Encoding or Escaping of Output CVE-2026-34480 |
CWE-116 | Medium | - | 28.04.2026 |
SB20260428217 SB20260513128 SB2026052632 and 21 more |
||
| #VU128401 - Improper Encoding or Escaping of Output CVE-2026-34479 |
CWE-116 | Medium | - | 28.04.2026 |
SB20260428217 SB20260513128 SB2026052632 and 20 more |
||
| #VU128400 - Improper Output Neutralization for Logs CVE-2026-34478 |
CWE-117 | Medium | - | 28.04.2026 |
SB20260428217 SB2026052632 SB2026052731 and 18 more |
||
| #VU128399 - Improper Certificate Validation CVE-2026-34477 |
CWE-295 | Medium | - | 28.04.2026 |
SB20260428217 SB20260513128 SB2026052632 and 21 more |
||
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 22.12.2025 |
SB2025122245 SB2026012084 SB2026012087 and 101 more |
||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | - | 04.08.2025 |
SB2025080422 SB2025080423 SB2025080427 and 182 more |
||
| #VU108843 - Resource exhaustion CVE-2025-46392 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 09.05.2025 |
SB2025050949 SB2025081124 SB2025091517 and 7 more |
||
| #VU88173 - Resource exhaustion CVE-2023-51775 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 05.04.2024 |
SB2024040525 SB2024041129 SB2024041130 and 83 more |
||
| #VU86824 - Improper input validation CVE-2020-14338 |
CWE-20 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 27.02.2024 |
SB2024022724 SB2024030424 SB2024040928 and 9 more |
||
| #VU82534 - Resource exhaustion CVE-2013-4002 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 27.10.2023 |
SB2023102710 SB2023102722 SB2023103009 and 14 more |
||
| #VU73244 - Resource exhaustion CVE-2023-26464 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 10.03.2023 |
SB2023031040 SB2023032716 SB2023050514 and 22 more |
||
| #VU65495 - Improper input validation CVE-2022-34169 |
CWE-20 | High | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 137 more |
||
| #VU61721 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-33813 |
CWE-611 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 29.03.2022 |
SB2021061628 SB2022032929 SB2022032930 and 39 more |
||
| #VU59693 - Deserialization of Untrusted Data CVE-2020-9493 |
CWE-502 | High | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.01.2022 |
SB2021061626 SB2022011819 SB2022012640 and 62 more |
||
| #VU59692 - Deserialization of Untrusted Data CVE-2022-23302 |
CWE-502 | High | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 60 more |
||
| #VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305 |
CWE-89 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 94 more |
||
| #VU58977 - Deserialization of Untrusted Data CVE-2021-4104 |
CWE-502 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 15.12.2021 |
SB2021121507 SB2021121647 SB2021121720 and 119 more |
||
| #VU30074 - Improper input validation CVE-2020-14621 |
CWE-20 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 16.07.2020 |
SB2020071694 SB2020071695 SB2020081001 and 57 more |
||
| #VU27960 - Deserialization of Untrusted Data CVE-2019-17571 |
CWE-502 | High | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.05.2020 |
SB2019122027 SB2020051806 SB2020011497 and 28 more |
||
| #VU27487 - Improper Certificate Validation CVE-2020-9488 |
CWE-295 | Low | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 04.05.2020 |
SB2020050406 SB2020071606 SB2020071620 and 67 more |
Showing elements 1 - 20 out of 34