← Back

CVE-2025-27906

nvd nist
Published: Oct 14, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the files cannot be read obtained or modified.

Affected (4)

Ibm
1 product
Content Navigator
Configuration A
4 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Ibm
Content Navigator
Version 3.0.11
Content Navigator
Version 3.0.15
Content Navigator
Version 3.1.0
Content Navigator
Version 3.2.0
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-548
Exposure of Information Through Directory Listing
A directory listing is inappropriately exposed, yielding potentially sensitive information to attackers.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.