Skip to content
OpenAdvisories
Medium · 5.4 CVE-2018-1496 EUVD-2018-12075GHSA-7mwg-7x8h-7xc2

IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed…

Published May 31, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141219.

Affected products

VendorProductAffectedFixed
IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, 3.0.3 —

References