Known vulnerabilities in IBM Content Navigator - page 2
Vendor:
IBM Corporation
Software:
IBM Content Navigator
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_content_navigator:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
34
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.1.0 IF008 LA2
3.2.0
3.2.0 IF003
3.2.0 IF002
3.2.0 IF001
3.0.15
3.1.0
3.1.0 IF007
3.1.0 IF006
3.1.0 IF005
3.1.0 IF004
3.1.0 IF003
3.1.0 IF002
3.1.0 IF001
3.0.15 IF008
3.0.15 IF007
3.0.15 IF006
3.0.15 IF004
3.0.15 IF003
3.0.15 IF001
3.1.0 IF008
3.0.15 IF009
3.2.0 IF004
3.0.15 IF5
3.0.11. IF18
3.0.11 IF016
3.0.14 IF005
3.0.15 IF002
3.0.11.13
3.0.13.5
3.0.14.2
3.0.11.14
3.0.13.6
3.0.14.3
3.0.14
3.0.11.10
3.0.12.6
3.0.13.3
3.0.12.4
3.0.13
3.0.12.3
3.0.12.2
3.0.12.1
3.0.11.7
3.0.11.6
3.0.11.5
3.0.11.4
3.0.11.3
3.0.11.2
3.0.11.1
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
Vulnerabilities (34)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU98132 - Inefficient Regular Expression Complexity CVE-2024-45296 |
CWE-1333 | Low | 3.0.11 IF18, 3.0.15 IF5 | 08.10.2024 |
SB2024100822 SB2024100823 SB2024100826 and 87 more |
||
| #VU86821 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2009-2625 |
CWE-835 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 27.02.2024 |
SB2024022724 SB2024030723 SB2024030833 and 12 more |
||
| #VU86625 - Resource exhaustion CVE-2024-26308 |
CWE-400 | Medium | 3.0.11 IF016, 3.0.14 IF005, 3.0.15 IF002 | 20.02.2024 |
SB2024022033 SB2024022937 SB2024031520 and 138 more |
||
| #VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-25710 |
CWE-835 | Medium | 3.0.11 IF016, 3.0.14 IF005, 3.0.15 IF002 | 20.02.2024 |
SB2024022033 SB2024022937 SB2024031520 and 102 more |
||
| #VU84467 - Server-Side Request Forgery (SSRF) CVE-2023-35896 |
CWE-918 | Low | 3.0.11.14, 3.0.13.6, 3.0.14.3 | 15.12.2023 |
SB2023121524 |
||
| #VU83271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-40684 |
CWE-79 | Medium | 3.0.11.13, 3.0.13.5, 3.0.14.2 | 20.11.2023 |
SB2023112014 SB2023121822 SB2024020501 |
||
| #VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998 |
CWE-770 | Medium | 3.0.11.10, 3.0.12.6, 3.0.13.3 | 20.02.2023 |
SB2023022046 SB2023022047 SB2023030917 and 203 more |
||
| #VU71586 - Out-of-bounds write CVE-2022-40152 |
CWE-787 | Medium | 3.0.12.4 | 26.01.2023 |
SB2023012669 SB2023012670 SB2023013124 and 52 more |
||
| #VU71314 - Improper input validation CVE-2022-40153 |
CWE-20 | Medium | 3.0.12.4 | 18.01.2023 |
SB2023011841 SB2023012670 SB2023021321 and 21 more |
||
| #VU70529 - Improper Authorization CVE-2022-43581 |
CWE-285 | Medium | 3.0.11.7, 3.0.12.3 | 28.12.2022 |
SB2022122825 SB2023032704 |
||
| #VU69283 - Out-of-bounds write CVE-2022-40151 |
CWE-787 | Medium | 3.0.12.4 | 14.11.2022 |
SB2022111420 SB2022122822 SB2023012670 and 32 more |
||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | 3.0.11.7, 3.0.12.4, 3.0.13 | 14.10.2022 |
SB2022101405 SB2022102709 SB2022110306 and 91 more |
||
| #VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437 |
CWE-835 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 25.01.2022 |
SB2022012503 SB2022041946 SB2022042249 and 92 more |
||
| #VU55416 - Improper input validation CVE-2012-0881 |
CWE-20 | Medium | 3.0.15 IF009, 3.1.0 IF008, 3.2.0 IF004 | 28.07.2021 |
SB2021072822 SB2023070731 SB2023102710 and 19 more |
Showing elements 21 - 40 out of 34