Documentation Offline (Ibm) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-08-13. Vendor: Ibm.

CVEs of Documentation Offline

• CVE-2026-17482 - CVSS 9.8 (critical), 2026-08-13: IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.
• CVE-2026-17481 - CVSS 9.8 (critical), 2026-08-13: IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.
• CVE-2026-17473 - CVSS 7.5 (high), 2026-08-13: IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted…
• CVE-2026-17468 - CVSS 5.3 (medium), 2026-08-13: IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.
• CVE-2026-16713 - CVSS 5.3 (medium), 2026-08-13: IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security…