Known vulnerabilities in IBM Content Navigator 3.0.15 IF009
Vendor:
IBM Corporation
Software:
IBM Content Navigator
Version:
3.0.15 IF009
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_content_navigator:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
11
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
3.1.0 IF008 LA2
3.2.0
3.2.0 IF003
3.2.0 IF002
3.2.0 IF001
3.0.15
3.1.0
3.1.0 IF007
3.1.0 IF006
3.1.0 IF005
3.1.0 IF004
3.1.0 IF003
3.1.0 IF002
3.1.0 IF001
3.0.15 IF008
3.0.15 IF007
3.0.15 IF006
3.0.15 IF004
3.0.15 IF003
3.0.15 IF001
3.1.0 IF008
3.0.15 IF009
3.2.0 IF004
3.0.15 IF5
3.0.11. IF18
3.0.11 IF016
3.0.14 IF005
3.0.15 IF002
3.0.11.13
3.0.13.5
3.0.14.2
3.0.11.14
3.0.13.6
3.0.14.3
3.0.14
3.0.11.10
3.0.12.6
3.0.13.3
3.0.12.4
3.0.13
3.0.12.3
3.0.12.2
3.0.12.1
3.0.11.7
3.0.11.6
3.0.11.5
3.0.11.4
3.0.11.3
3.0.11.2
3.0.11.1
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
Vulnerabilities (11)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 22.12.2025 |
SB2025122245 SB2026012084 SB2026012087 and 98 more |
||
| #VU88173 - Resource exhaustion CVE-2023-51775 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 05.04.2024 |
SB2024040525 SB2024041129 SB2024041130 and 83 more |
||
| #VU73244 - Resource exhaustion CVE-2023-26464 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 10.03.2023 |
SB2023031040 SB2023032716 SB2023050514 and 22 more |
||
| #VU65495 - Improper input validation CVE-2022-34169 |
CWE-20 | High | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 137 more |
||
| #VU61721 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-33813 |
CWE-611 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 29.03.2022 |
SB2021061628 SB2022032929 SB2022032930 and 39 more |
||
| #VU59693 - Deserialization of Untrusted Data CVE-2020-9493 |
CWE-502 | High | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.01.2022 |
SB2021061626 SB2022011819 SB2022012640 and 62 more |
||
| #VU59692 - Deserialization of Untrusted Data CVE-2022-23302 |
CWE-502 | High | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 60 more |
||
| #VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305 |
CWE-89 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 94 more |
||
| #VU58977 - Deserialization of Untrusted Data CVE-2021-4104 |
CWE-502 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 15.12.2021 |
SB2021121507 SB2021121647 SB2021121720 and 119 more |
||
| #VU27960 - Deserialization of Untrusted Data CVE-2019-17571 |
CWE-502 | High | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.05.2020 |
SB2019122027 SB2020051806 SB2020011497 and 28 more |
||
| #VU27487 - Improper Certificate Validation CVE-2020-9488 |
CWE-295 | Low | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 04.05.2020 |
SB2020050406 SB2020071606 SB2020071620 and 67 more |