VULNERABILITY INTELLIGENCE

CVE-2022-43581

CVSS score7.5 HIGH
EPSS probability0.74%
CISA KEVNot currently listed
Published2022-12-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805.

Weakness classification

  • psirt@us.ibm.com: CWE-119
  • nvd@nist.gov: CWE-862

Primary references