What’s Vulnerable › Vulnerabilities
CVE-2025-27906: IBM Content Navigator information disclosure
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-10-14 · updated 2026-10-08
- Weakness: CWE-548
Description
IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the files cannot be read obtained or modified.
Affected products
- IBM Content Navigator: 3.0.11, 3.0.15, 3.1.0, 3.2.0
References
Get alerted when CVE-2025-27906 or the next vulnerability affects your stack