Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-1243 EUVD-2026-18112GHSA-x8pv-gc6r-gh6r

IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability

Published Apr 2, 2026 · Updated Apr 2, 2026 · Assigned by ibm

Vendor: IBM Product: Content Navigator

Description

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

VendorProductAffectedFixed
IBM Content Navigator 3.0.15 – ≤ 1.11.0, 3.1.0, 3.2.0 —

References