Zero Day MonitorZDM

← Back to list

5.4

CVE-2026-1243PATCHED

ibm · content navigator

IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability

Description

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected Products

Vendor	Product	Versions
ibm	content navigator	3.0.15, 3.1.0, 3.2.0

References

https://www.ibm.com/support/pages/node/7268006(vendor-advisory, patch)

CVSS 3.15.4 MEDIUM

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CISA KEV❌ No

Actively exploited❌ No

Patch available

https://www.ibm.com/support/pages/node/7268006

PublishedApr 2, 2026

Trending Score0

Source articles0

Independent0

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

MEDIUMCVE-2025-36375EXP

IBM DataPower Gateway vulnerable to CSRF

CRITICALCVE-2026-1345EXP

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

CRITICALCVE-2025-66485EXP

Multiple vulnerabilities have been addressed in IBM Aspera Shares

CRITICALCVE-2026-4101EXP

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

HIGHCVE-2026-1491EXP

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Apr 2, 2026

Patch Available

Apr 2, 2026

Discovered by ZDM

Apr 2, 2026