Known vulnerabilities in IBM Content Navigator 3.1.0 IF007
Vendor:
IBM Corporation
Software:
IBM Content Navigator
Version:
3.1.0 IF007
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_content_navigator:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
18
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
3.1.0 IF008 LA2
3.2.0
3.2.0 IF003
3.2.0 IF002
3.2.0 IF001
3.0.15
3.1.0
3.1.0 IF007
3.1.0 IF006
3.1.0 IF005
3.1.0 IF004
3.1.0 IF003
3.1.0 IF002
3.1.0 IF001
3.0.15 IF008
3.0.15 IF007
3.0.15 IF006
3.0.15 IF004
3.0.15 IF003
3.0.15 IF001
3.1.0 IF008
3.0.15 IF009
3.2.0 IF004
3.0.15 IF5
3.0.11. IF18
3.0.11 IF016
3.0.14 IF005
3.0.15 IF002
3.0.11.13
3.0.13.5
3.0.14.2
3.0.11.14
3.0.13.6
3.0.14.3
3.0.14
3.0.11.10
3.0.12.6
3.0.13.3
3.0.12.4
3.0.13
3.0.12.3
3.0.12.2
3.0.12.1
3.0.11.7
3.0.11.6
3.0.11.5
3.0.11.4
3.0.11.3
3.0.11.2
3.0.11.1
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
Vulnerabilities (18)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 22.12.2025 |
SB2025122245 SB2026012084 SB2026012087 and 98 more |
||
| #VU108843 - Resource exhaustion CVE-2025-46392 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 09.05.2025 |
SB2025050949 SB2025081124 SB2025091517 and 7 more |
||
| #VU88173 - Resource exhaustion CVE-2023-51775 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 05.04.2024 |
SB2024040525 SB2024041129 SB2024041130 and 83 more |
||
| #VU86824 - Improper input validation CVE-2020-14338 |
CWE-20 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 27.02.2024 |
SB2024022724 SB2024030424 SB2024040928 and 9 more |
||
| #VU86821 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2009-2625 |
CWE-835 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 27.02.2024 |
SB2024022724 SB2024030723 SB2024030833 and 12 more |
||
| #VU82534 - Resource exhaustion CVE-2013-4002 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 27.10.2023 |
SB2023102710 SB2023102722 SB2023103009 and 14 more |
||
| #VU73244 - Resource exhaustion CVE-2023-26464 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 10.03.2023 |
SB2023031040 SB2023032716 SB2023050514 and 22 more |
||
| #VU65495 - Improper input validation CVE-2022-34169 |
CWE-20 | High | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 137 more |
||
| #VU61721 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-33813 |
CWE-611 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 29.03.2022 |
SB2021061628 SB2022032929 SB2022032930 and 39 more |
||
| #VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437 |
CWE-835 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 25.01.2022 |
SB2022012503 SB2022041946 SB2022042249 and 92 more |
||
| #VU59693 - Deserialization of Untrusted Data CVE-2020-9493 |
CWE-502 | High | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.01.2022 |
SB2021061626 SB2022011819 SB2022012640 and 62 more |
||
| #VU59692 - Deserialization of Untrusted Data CVE-2022-23302 |
CWE-502 | High | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 60 more |
||
| #VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305 |
CWE-89 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 94 more |
||
| #VU58977 - Deserialization of Untrusted Data CVE-2021-4104 |
CWE-502 | Medium | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 15.12.2021 |
SB2021121507 SB2021121647 SB2021121720 and 119 more |
||
| #VU55416 - Improper input validation CVE-2012-0881 |
CWE-20 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 28.07.2021 |
SB2021072822 SB2023070731 SB2023102710 and 19 more |
||
| #VU30074 - Improper input validation CVE-2020-14621 |
CWE-20 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 16.07.2020 |
SB2020071694 SB2020071695 SB2020081001 and 57 more |
||
| #VU27960 - Deserialization of Untrusted Data CVE-2019-17571 |
CWE-502 | High | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 18.05.2020 |
SB2019122027 SB2020051806 SB2020011497 and 28 more |
||
| #VU27487 - Improper Certificate Validation CVE-2020-9488 |
CWE-295 | Low | 3.0.15 IF009, 3.1.0 IF008 LA2, 3.2.0 IF004 | 04.05.2020 |
SB2020050406 SB2020071606 SB2020071620 and 67 more |