Lucene search

China National Vulnerability DatabaseCNVD-2023-98176

HistoryOct 11, 2023 - 12:00 a.m.

IBM Content Navigator Cross-Site Scripting Vulnerability (CNVD-2023-98176)

2023-10-1100:00:00

China National Vulnerability Database

www.cnvd.org.cn

ibm

content navigator

cross-site scripting

vulnerability

web client

international business machines

searching

processing documents

content servers

web browser

filtering

escaping

user-supplied data

attacker

arbitrary web script

html

crafted payload

AI Score

Confidence

High

EPSS

Percentile

13.1%

JSON

IBM Content Navigator is a Web client from International Business Machines (IBM). The product supports searching and processing documents stored in content servers from a Web browser. IBM Content Navigator suffers from a cross-site scripting vulnerability that stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload.