ibm content navigator

Name: ibm content navigator
Brand: ibm

productUS

cpe:2.3:a:ibm:content_navigator:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical5high28medium4low

updated 2026-10-28

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-1364US	high8.2	2.37% (84th)	—	no fix	2018-01-29	3 versions
CVE-2019-4034US	high8.8	1.93% (80th)	—	no fix	2019-03-14	= 3.0.0
CVE-2020-4934US	medium4.3	1.84% (79th)	—	no fix	2021-02-02	= 3.0.0
CVE-2013-5462US	medium4.3	1.80% (78th)	—	no fix	2013-12-19	3 versions
CVE-2014-0874US	low3.5	1.42% (73rd)	—	no fix	2014-02-28	3 versions
CVE-2020-4309US	medium5.3	1.31% (70th)	—	no fix	2020-03-24	= 3.0.0
CVE-2020-4757US	medium6.4	1.29% (70th)	—	no fix	2020-12-21	= 3.0.0
CVE-2020-4687US	medium4.3	1.05% (64th)	—	no fix	2020-08-20	3 versions
CVE-2021-29714US	medium6.5	1.01% (63rd)	—	no fix	2021-08-09	= 3.0.0
CVE-2019-4741US	medium5.3	0.96% (62nd)	—	no fix	2020-02-12	= 3.0.0
CVE-2018-1496US	medium5.4	0.95% (61st)	—	no fix	2018-05-31	5 versions
CVE-2014-8911US	medium4.3	0.93% (61st)	—	no fix	2015-02-14	3 versions
CVE-2019-4035US	medium5.4	0.92% (60th)	—	no fix	2019-03-22	= 3.0.0
CVE-2019-4263US	medium4.3	0.92% (60th)	—	no fix	2019-07-11	= 3.0.0
CVE-2018-1366US	high7.8	0.92% (60th)	—	no fix	2018-02-07	6 versions
CVE-2020-4253US	high8.8	0.90% (60th)	—	no fix	2020-03-24	= 3.0.0
CVE-2014-0858US	low3.5	0.90% (59th)	—	no fix	2014-02-27	3 versions
CVE-2020-4760US	medium5.4	0.86% (58th)	—	no fix	2020-11-10	= 3.0.0
CVE-2020-4704US	medium5.4	0.86% (58th)	—	no fix	2020-11-10	= 3.0.0
CVE-2019-4679US	medium4.3	0.82% (57th)	—	no fix	2020-01-28	= 3.0.0
CVE-2019-4092US	medium6.1	0.79% (56th)	—	no fix	2019-04-25	2 versions
CVE-2015-1888US	low3.5	0.78% (56th)	—	no fix	2015-10-03	2 versions
CVE-2022-43581US	high8.8OT elevated	0.74% (54th)	—	no fix	2022-12-07	3.0.0 → 3.0.12
CVE-2017-1331US	medium5.4	0.73% (54th)	—	no fix	2017-08-04	5 versions
CVE-2020-4548US	low2.7	0.73% (54th)	—	no fix	2020-08-20	3 versions
CVE-2019-4571US	medium5.4	0.70% (53rd)	—	no fix	2019-09-25	= 3.0.0
CVE-2019-4033US	medium5.4	0.66% (51st)	—	no fix	2019-04-25	2 versions
CVE-2017-1522US	medium5.4	0.54% (45th)	—	no fix	2017-10-05	3 versions
CVE-2017-1502US	medium5.4	0.54% (45th)	—	no fix	2017-09-07	3 versions
CVE-2017-1282US	medium5.4	0.54% (45th)	—	no fix	2017-05-22	5 versions
CVE-2017-1146US	medium5.4	0.54% (45th)	—	no fix	2017-03-20	2 versions
CVE-2021-20550US	medium5.4	0.50% (42nd)	—	no fix	2021-04-27	= 3.0.0
CVE-2021-20549US	medium5.4	0.50% (42nd)	—	no fix	2021-04-27	= 3.0.0
CVE-2021-20448US	medium5.4	0.50% (42nd)	—	no fix	2021-04-27	= 3.0.0
CVE-2023-40684US	medium5.4	0.37% (31st)	—	no fix	2023-10-04	3 versions
CVE-2025-27906US	—	0.31% (23rd)	—	no fix	2025-10-14	4 versions
CVE-2023-35896US	medium5.4	0.29% (21st)	—	no fix	2023-11-03	= 3.0.13
CVE-2024-51475US	medium6.1	0.27% (20th)	—	no fix	2025-05-16	3 versions
CVE-2024-56341US	—	0.24% (15th)	—	no fix	2025-04-02	3 versions
CVE-2026-1243US	—	0.21% (11th)	—	no fix	2026-04-02	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')21 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE40 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan