Datacap (Ibm) - vulnerabilities (CVEs)

19 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2026-06-22. Vendor: Ibm.

CVEs of Datacap

• CVE-2026-9610 - CVSS 5.3 (medium), 2026-06-22: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is…
• CVE-2026-8636 - CVSS 7.5 (high), 2026-06-22: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys…
• CVE-2026-8059 - CVSS 6.1 (medium), 2026-06-22: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an…
• CVE-2025-36027 - CVSS 5.4 (medium), 2025-06-28: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web…
• CVE-2025-36026 - CVSS 4.3 (medium), 2025-06-28: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie…
• CVE-2024-39730 - CVSS 5.4 (medium), 2025-06-28: IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a…
• CVE-2024-39729 - CVSS 4.3 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be…
• CVE-2024-39741 - CVSS 5.3 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the system. An attacker could send a…
• CVE-2024-39740 - CVSS 5.3 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could allow an attacker to gather information…
• CVE-2024-39735 - CVSS 5.4 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed…
• CVE-2024-39739 - CVSS 5.4 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to…
• CVE-2024-39737 - CVSS 5.4 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive information when a detailed technical error…
• CVE-2024-39736 - CVSS 9.8 (critical), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST…
• CVE-2024-39731 - CVSS 7.5 (high), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
• CVE-2024-39728 - CVSS 6.4 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary…
• CVE-2024-39734 - CVSS 4.3 (medium), 2024-07-14: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be…
• CVE-2024-39733 - CVSS 5.5 (medium), 2024-07-14: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID:…
• CVE-2024-39732 - CVSS 7.5 (high), 2024-07-14: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that could be obtained by a malicious user.…
• CVE-2018-1773 - CVSS 4.3 (medium), 2018-09-12: IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the initial login is…