← back
CVE-2019-4035medium

CVE-2019-4035

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 0.9%
exploitation probability
0.9%top 41% of all CVEs
observed exploitation
nono source reports it
IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to their Edit client directly. Then Edit client will download documents from the fake ICN website. IBM X-Force ID: 156001.
CVSS:3.0/A:L/UI:N/PR:L/AC:L/S:U/AV:N/C:L/I:L/RL:O/E:U/RC:C
Affected products
IBM · Content Navigator