Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

ibm datacap navigator 9.1.7 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3

CVE-2020-4902

IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database. IBM X-Force ID: 19...
Ibm Datacap Navigator 9.1.7
5.4
CVSSv3

CVE-2020-4935

IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trust...
Ibm Datacap Navigator 9.1.7
5.4
CVSSv3

CVE-2024-39728

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within...
Ibm Datacap 9.1.5Ibm Datacap 9.1.6Ibm Datacap 9.1.7Ibm Datacap 9.1.8Ibm Datacap 9.1.9Ibm Datacap Navigator
4.3
CVSSv3

CVE-2024-39729

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be used in further attacks against the system. IBM X-Force ID: 295968.
Ibm Datacap 9.1.5Ibm Datacap 9.1.6Ibm Datacap 9.1.7Ibm Datacap 9.1.8Ibm Datacap 9.1.9Ibm Datacap Navigator
5.4
CVSSv3

CVE-2024-39735

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosu...
Ibm Datacap 9.1.5Ibm Datacap 9.1.6Ibm Datacap 9.1.7Ibm Datacap 9.1.8Ibm Datacap 9.1.9Ibm Datacap Navigator
9.8
CVSSv3

CVE-2024-39736

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an malicious user to conduct various attacks against the vulnerable system, including cross-site script...
Ibm Datacap 9.1.5Ibm Datacap 9.1.6Ibm Datacap 9.1.7Ibm Datacap 9.1.8Ibm Datacap 9.1.9Ibm Datacap Navigator
5.3
CVSSv3

CVE-2024-39737

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote malicious user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID...
Ibm Datacap 9.1.5Ibm Datacap 9.1.6Ibm Datacap 9.1.7Ibm Datacap 9.1.8Ibm Datacap 9.1.9Ibm Datacap Navigator
4.3
CVSSv3

CVE-2024-39739

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated malicious user to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks....
Ibm Datacap 9.1.5Ibm Datacap 9.1.6Ibm Datacap 9.1.7Ibm Datacap 9.1.8Ibm Datacap 9.1.9Ibm Datacap Navigator
5.3
CVSSv3

CVE-2024-39740

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could allow an malicious user to gather information for future attacks against the system. IBM X-Force ID: 296009.
Ibm Datacap 9.1.5Ibm Datacap 9.1.6Ibm Datacap 9.1.7Ibm Datacap 9.1.8Ibm Datacap 9.1.9Ibm Datacap Navigator
5.3
CVSSv3

CVE-2024-39741

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote malicious user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM...
Ibm Datacap 9.1.5Ibm Datacap 9.1.6Ibm Datacap 9.1.7Ibm Datacap 9.1.8Ibm Datacap 9.1.9Ibm Datacap Navigator
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
springboot-adminCVE-2025-3989lecmsCVE-2025-3906code injectionCVE-2025-32432CVE-2025-2105CVE-2025-3984wirelessopplustype confusionCVE-2025-29306n150rt
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook