CVE-2022-43581: IBM Content Navigator code execution

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-07 · updated 2026-06-17
Weakness: CWE-119

Description

IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805.

Affected products

IBM Content Navigator: from 3.0.0 through 3.0.12

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/238805
https://www.ibm.com/support/pages/node/6844453
https://exchange.xforce.ibmcloud.com/vulnerabilities/238805
https://www.ibm.com/support/pages/node/6844453

Get alerted when CVE-2022-43581 or the next vulnerability affects your stack