CVE-2022-43581: IBM Content Navigator

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805.

Affected products

• IBM Content Navigator: from 3.0.0, up to and including 3.0.12

Published 2022-12-07. Last modified 2026-06-17.