CVE-2017-1502

IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129577.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22006941Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/129577Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg22006941Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/129577Third Party Advisory, VDB Entry

Published

Sep 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15014OpenText Documentum Content Server (formerly EMC Documentum …
• CVE-2017-15015ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulne…
• CVE-2017-15016ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulne…
• CVE-2017-15017ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulne…
• CVE-2017-15018LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3…5.5
• CVE-2017-15019LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode…
• CVE-2017-15020dwarf1.c in the Binary File Descriptor (BFD) library (aka li…
• CVE-2017-15021bfd_get_debug_link_info_1 in opncls.c in the Binary File Des…
• CVE-2017-15022dwarf2.c in the Binary File Descriptor (BFD) library (aka li…
• CVE-2017-15023read_formatted_entries in dwarf2.c in the Binary File Descri…
• CVE-2017-15024find_abstract_instance_name in dwarf2.c in the Binary File D…
• CVE-2017-15025decode_line_info in dwarf2.c in the Binary File Descriptor (…