CVE-2025-27906CWE-548

CVE-2025-27906

Medium · published October 14, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the files cannot be read obtained or modified.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-548 · Exposure of Information Through Directory Listing
Published
2025-10-14T19:16Z
Affected products (4)
ProductVersionsFixed in
ibm/content_navigatorall versions—
ibm/content_navigatorall versions—
ibm/content_navigatorall versions—
ibm/content_navigatorall versions—
References (1)
https://www.ibm.com/support/pages/node/7247854 · [email protected]
EPSS history
Timeline
  • 14 OCT 14:08Z
    IBM Content Navigator information disclosure
    cvelistv5