Datacap Navigator (Ibm) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-06-22. Vendor: Ibm.
CVEs of Datacap Navigator
- CVE-2026-9610 - CVSS 5.3 (medium), 2026-06-22: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is…
- CVE-2026-8636 - CVSS 7.5 (high), 2026-06-22: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys…
- CVE-2026-8059 - CVSS 6.1 (medium), 2026-06-22: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an…
- CVE-2025-36026 - CVSS 4.3 (medium), 2025-06-28: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie…
- CVE-2025-36027 - CVSS 5.4 (medium), 2025-06-28: IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web…
- CVE-2024-39730 - CVSS 5.4 (medium), 2025-06-28: IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a…
- CVE-2024-39735 - CVSS 5.4 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed…
- CVE-2024-39729 - CVSS 4.3 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be…
- CVE-2024-39741 - CVSS 5.3 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the system. An attacker could send a…
- CVE-2024-39740 - CVSS 5.3 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could allow an attacker to gather information…
- CVE-2024-39739 - CVSS 5.4 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to…
- CVE-2024-39737 - CVSS 5.4 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive information when a detailed technical error…
- CVE-2024-39728 - CVSS 6.4 (medium), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary…
- CVE-2024-39731 - CVSS 7.5 (high), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
- CVE-2024-39736 - CVSS 9.8 (critical), 2024-07-15: IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST…
- CVE-2020-4935 - CVSS 5.4 (medium), 2021-07-01: IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
- CVE-2020-4902 - CVSS 8.8 (high), 2021-07-01: IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements,…
