Known vulnerabilities in IBM Content Navigator - page 2
Vendor:
IBM Corporation
Software:
IBM Content Navigator
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_content_navigator:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
29
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.1.0 IF008 LA2
3.2.0
3.2.0 IF003
3.2.0 IF002
3.2.0 IF001
3.0.15
3.1.0
3.1.0 IF007
3.1.0 IF006
3.1.0 IF005
3.1.0 IF004
3.1.0 IF003
3.1.0 IF002
3.1.0 IF001
3.0.15 IF008
3.0.15 IF007
3.0.15 IF006
3.0.15 IF004
3.0.15 IF003
3.0.15 IF001
3.1.0 IF008
3.0.15 IF009
3.2.0 IF004
3.0.15 IF5
3.0.11. IF18
3.0.11 IF016
3.0.14 IF005
3.0.15 IF002
3.0.11.13
3.0.13.5
3.0.14.2
3.0.11.14
3.0.13.6
3.0.14.3
3.0.14
3.0.11.10
3.0.12.6
3.0.13.3
3.0.12.4
3.0.13
3.0.12.3
3.0.12.2
3.0.12.1
3.0.11.7
3.0.11.6
3.0.11.5
3.0.11.4
3.0.11.3
3.0.11.2
3.0.11.1
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
Vulnerabilities (29)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86625 - Resource exhaustion CVE-2024-26308 |
CWE-400 | Medium | 3.0.11 IF016, 3.0.14 IF005, 3.0.15 IF002 | 20.02.2024 |
SB2024022033 SB2024022937 SB2024031520 and 136 more |
||
| #VU84467 - Server-Side Request Forgery (SSRF) CVE-2023-35896 |
CWE-918 | Low | 3.0.11.14, 3.0.13.6, 3.0.14.3 | 15.12.2023 |
SB2023121524 |
||
| #VU83271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-40684 |
CWE-79 | Medium | 3.0.11.13, 3.0.13.5, 3.0.14.2 | 20.11.2023 |
SB2023112014 SB2023121822 SB2024020501 |
||
| #VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998 |
CWE-770 | Medium | 3.0.11.10, 3.0.12.6, 3.0.13.3 | 20.02.2023 |
SB2023022046 SB2023022047 SB2023030917 and 202 more |
||
| #VU71586 - Out-of-bounds write CVE-2022-40152 |
CWE-787 | Medium | 3.0.12.4 | 26.01.2023 |
SB2023012669 SB2023012670 SB2023013124 and 52 more |
||
| #VU71314 - Improper input validation CVE-2022-40153 |
CWE-20 | Medium | 3.0.12.4 | 18.01.2023 |
SB2023011841 SB2023012670 SB2023021321 and 21 more |
||
| #VU70529 - Improper Authorization CVE-2022-43581 |
CWE-285 | Medium | 3.0.11.7, 3.0.12.3 | 28.12.2022 |
SB2022122825 SB2023032704 |
||
| #VU69283 - Out-of-bounds write CVE-2022-40151 |
CWE-787 | Medium | 3.0.12.4 | 14.11.2022 |
SB2022111420 SB2022122822 SB2023012670 and 32 more |
||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | 3.0.11.7, 3.0.12.4, 3.0.13 | 14.10.2022 |
SB2022101405 SB2022102709 SB2022110306 and 91 more |
Showing elements 21 - 40 out of 29