Known vulnerabilities in IBM Content Navigator - page 2
Vendor:
IBM Corporation
Software:
IBM Content Navigator
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_content_navigator:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
36
Public exploits:
3
Known exploited (KEV):
1
Breakdown by Severity Chart
26.0.0.0
3.2.0 IF008
3.1.0 IF013
26.0.0 IF003
3.1.0 IF008 LA2
3.2.0
3.2.0 IF003
3.2.0 IF002
3.2.0 IF001
3.0.15
3.1.0
3.1.0 IF007
3.1.0 IF006
3.1.0 IF005
3.1.0 IF004
3.1.0 IF003
3.1.0 IF002
3.1.0 IF001
3.0.15 IF008
3.0.15 IF007
3.0.15 IF006
3.0.15 IF004
3.0.15 IF003
3.0.15 IF001
3.1.0 IF008
3.0.15 IF009
3.2.0 IF004
3.0.15 IF5
3.0.11. IF18
3.0.11 IF016
3.0.14 IF005
3.0.15 IF002
3.0.11.13
3.0.13.5
3.0.14.2
3.0.11.14
3.0.13.6
3.0.14.3
3.0.14
3.0.11.10
3.0.12.6
3.0.13.3
3.0.12.4
3.0.13
3.0.12.3
3.0.12.2
3.0.12.1
3.0.11.7
3.0.11.6
3.0.11.5
3.0.11.4
3.0.11.3
3.0.11.2
3.0.11.1
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
Vulnerabilities (36)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU98132 - Inefficient Regular Expression Complexity CVE-2024-45296 |
CWE-1333 | Low | 3.0.11 IF18, 3.0.15 IF5 | 08.10.2024 |
SB2024100822 SB2024100823 SB2024100826 and 87 more |
||
| #VU86824 - Improper input validation CVE-2020-14338 |
CWE-20 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 27.02.2024 |
SB2024022724 SB2024030424 SB2024040928 and 9 more |
||
| #VU86625 - Resource exhaustion CVE-2024-26308 |
CWE-400 | Medium | 3.0.11 IF016, 3.0.14 IF005, 3.0.15 IF002 | 20.02.2024 |
SB2024022033 SB2024022937 SB2024031520 and 138 more |
||
| #VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-25710 |
CWE-835 | Medium | 3.0.11 IF016, 3.0.14 IF005, 3.0.15 IF002 | 20.02.2024 |
SB2024022033 SB2024022937 SB2024031520 and 103 more |
||
| #VU84467 - Server-Side Request Forgery (SSRF) CVE-2023-35896 |
CWE-918 | Low | 3.0.11.14, 3.0.13.6, 3.0.14.3 | 15.12.2023 |
SB2023121524 |
||
| #VU83271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-40684 |
CWE-79 | Medium | 3.0.11.13, 3.0.13.5, 3.0.14.2 | 20.11.2023 |
SB2023112014 SB2023121822 SB2024020501 |
||
| #VU82534 - Resource exhaustion CVE-2013-4002 |
CWE-400 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 27.10.2023 |
SB2023102710 SB2023102722 SB2023103009 and 14 more |
||
| #VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998 |
CWE-770 | Medium | 3.0.11.10, 3.0.12.6, 3.0.13.3 | 20.02.2023 |
SB2023022046 SB2023022047 SB2023030917 and 203 more |
||
| #VU71586 - Out-of-bounds write CVE-2022-40152 |
CWE-787 | Medium | 3.0.12.4 | 26.01.2023 |
SB2023012669 SB2023012670 SB2023013124 and 52 more |
||
| #VU71314 - Improper input validation CVE-2022-40153 |
CWE-20 | Medium | 3.0.12.4 | 18.01.2023 |
SB2023011841 SB2023012670 SB2023021321 and 21 more |
||
| #VU70529 - Improper Authorization CVE-2022-43581 |
CWE-285 | Medium | 3.0.11.7, 3.0.12.3 | 28.12.2022 |
SB2022122825 SB2023032704 |
||
| #VU69283 - Out-of-bounds write CVE-2022-40151 |
CWE-787 | Medium | 3.0.12.4 | 14.11.2022 |
SB2022111420 SB2022122822 SB2023012670 and 32 more |
||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | 3.0.11.7, 3.0.12.4, 3.0.13 | 14.10.2022 |
SB2022101405 SB2022102709 SB2022110306 and 91 more |
||
| #VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437 |
CWE-835 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 25.01.2022 |
SB2022012503 SB2022041946 SB2022042249 and 92 more |
||
| #VU55416 - Improper input validation CVE-2012-0881 |
CWE-20 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 28.07.2021 |
SB2021072822 SB2023070731 SB2023102710 and 19 more |
||
| #VU30074 - Improper input validation CVE-2020-14621 |
CWE-20 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 16.07.2020 |
SB2020071694 SB2020071695 SB2020081001 and 57 more |
Showing elements 21 - 40 out of 36