High severity8.2NVD Advisory· Published Jan 29, 2018· Updated Jun 17, 2026
CVE-2018-1364
CVE-2018-1364
Description
IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 137449.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:ibm:content_navigator:2.0.3:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:ibm:content_navigator:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:content_navigator:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:content_navigator:3.0.3:*:*:*:*:*:*:*
- (no CPE)range: 2.0, 3.0
- (no CPE)range: 3.0.0
Patches
Vulnerability mechanics
References
3- www.ibm.com/support/docview.wssnvdVendor Advisory
- www.securityfocus.com/bid/102864nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/137449nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.